Organisations

Organisations in Phase contain all your Apps and Users, and allow you to collaborate with your team.

Create an Organisation

When you sign up on Phase, you will need to create an Organisation. You must choose a name for your Organisation that can contain letters or numbers. Organisation names must be unique.

Apps

This page lists all Apps in your Organisation, along with information about the number of members, environments, integrations and service accounts accessible by you in each App. Click on an App to view and manage it.

Members

This page lists all members of your Organisation. If you are an Owner or Admin, you can modify member roles from this screen.

You can also invite new members to your Organisation. To invite a new member, click on the "Add a member" button, enter the email of the user you wish to invite, optionally select a role and click "Invite". You will need to manually provision access to Apps for the new member.

You are limited to selecting a non Global Access role when inviting a new member. This is because the user has not created an account and associated cryptographic keys. For more information on Global Access roles, see Roles.

Once a member has joined, you can grant them access to specific Apps and Environments from their member page.

When you invite a member or change a member's role, you can only select a role whose permissions your own role also has. This limit does not apply to users with the Owner or Admin role.

Settings

This page shows your account and recovery info related to this Organisation. You can view your current role, preferences and download your account recovery kit from this screen. This page will also show you the current billing status of your Organisation.

The Account & Security tab lets you view your recovery kit and change your password for this account.

Transfer Ownership

Organisation Owners can transfer ownership to another member who has the Admin role. This is useful when an organisation needs to change hands, such as when the current owner is leaving the team or delegating responsibilities.

To transfer ownership:

1. Log in as the Organisation Owner and navigate to your Organisation Settings. Scroll down to the Danger Zone section and click Transfer Ownership.
   
2. Select the Admin member you want to make the new Owner. Only members with the Admin role are eligible.
   
3. Review the changes, confirm that the new Owner has backed up their account recovery kit, and acknowledge that you will lose your Owner privileges. Click Transfer Ownership to complete the transfer. If you are using Phase Cloud, you will see a section for updating the billing email address.
   

Once the transfer is complete:

• The selected member becomes the new Owner of the organisation.
• You will be demoted to an Admin and will continue to remain a member of the organisation until removed.
• Both the old and new Owner will receive an email notification about the transfer.

Delete an Organisation

Organisation Owners can delete an organisation. Deleting it locks the organisation at once. After 7 days, Phase permanently deletes the organisation and all of its data. Until then, the Owner can restore it.

On Phase Cloud, an organisation with unpaid invoices can't be deleted. Pay them first.

To delete an organisation:

1. Log in as the Organisation Owner and navigate to your Organisation Settings. Scroll down to the Danger Zone section and click Delete Organisation.
   
2. Review what stops working now and what will be deleted. Type the organisation name to confirm, then click Delete organisation.
   

Pending Deletion

For the next 7 days, the organisation is locked:

• Nobody can open it. It stays in the organisation list, with its deletion date.
• Access tokens, service accounts, SCIM and external identities stop working, so apps and CI pipelines can't fetch secrets.
• Secret syncs and secret rotations pause.
• On Phase Cloud, a paid subscription is set to cancel at the end of the current billing period.

Restore an Organisation

The Owner can restore the organisation at any time during the 7 days, or later while its deletion is delayed. In the organisation list, click Restore organisation on its card. Other members can see the deletion date, but only the Owner can restore it.

After a restore, the organisation works as before, and paused syncs and rotations resume.

On Phase Cloud, the subscription continues if you restore the organisation before the end of the billing period. If the period has already ended, so has the subscription: the organisation is on the Free plan, and you need to subscribe again.

Permanent Deletion

After 7 days, Phase:

• Revokes active dynamic secret leases and rotating secret credentials at the provider.
• Stops syncs and log streams. Secrets already synced to other services stay there.
• On Phase Cloud, cancels the remaining subscription.
• Deletes the organisation and all of its data: apps, environments, secrets and secret history, members, invites, teams, roles, network access policies, service accounts and access tokens, integrations, log streams, SSO and SCIM configuration, audit logs and secret access logs.
• Deletes accounts provisioned by SCIM that don't belong to another organisation.
• Emails the Owner to confirm the deletion.

Delayed Deletion

If a lease or credential can't be revoked, Phase deletes nothing, emails the Owner and tries again every hour, so a temporary problem at the provider resolves itself. Meanwhile the organisation's card shows Deletion delayed.

If Phase no longer has access to the provider, the Owner can still restore the organisation, even after the 7 days. Give Phase access to the provider again, for example by updating its third-party credentials, then delete the organisation again.

Self-hosting

Permanent deletion runs on the maintenance queue. The bundled worker (python manage.py rqworker) starts a worker for it. If you run split workers (e.g. one Deployment per queue on Kubernetes), add a consumer for the maintenance queue. Without one, deleted organisations stay locked after the 7 days and are never deleted.