Skip to Content
Features · Security and access

Choose who can touch your Odoo, and see what they did

Give each person the access their job needs, and nothing more. Every login to Odoo from the dashboard is recorded, and your secrets stay hidden.

Roles Developer access for contractors Two-factor sign-in Audit log ISO 27001
skysize · access AccessAuditSettings
A
Admin
D
Developer
D
Developer
GR
User
Invite by emaillinks expire after 7 days
Access control

Who can do what

Three roles

A User can look but not change things. A Developer works on test branches only. An Admin runs the whole project, backups too.

WORKS ON Managed Your own server On-Premise Docs ↗

Developer access for contractors

A developer gets full control of test branches. They can't see your live data, your settings or your backups. They only see the env vars for test branches.

WORKS ON Managed Your own server On-Premise Docs ↗

Groups for your teams

Put people in a group and give the group access to many projects at once. Take someone out, and they lose access to all of them.

WORKS ON Managed Your own server On-Premise Docs ↗

Invitations that expire

Invite people by email. Only that email can accept, and the link stops working after 7 days. You can take an invitation back before it's used.

WORKS ON Managed Your own server On-Premise Docs ↗

Always one admin

A project can't lose its last admin. Nobody gets locked out of their own project by mistake.

WORKS ON Managed Your own server On-Premise Docs ↗
On the record

Sign-in and audit log

Two-factor sign-in

Turn on two-factor sign-in for your Skysize account. A password alone is then not enough to get in.

WORKS ON Managed Your own server On-Premise

Log in to Odoo as any user, on the record

Admins can open Odoo as one of its users to check a problem. That works for your staff, and for portal users like the customers who log in to your portal. No password is needed. The Audit tab logs who did it, as which user, where, and when.

WORKS ON Managed Your own server On-Premise Docs ↗

A named record on risky changes

An admin can turn off the safety copy made before updates. If they do, the dashboard shows their name and the date on each update after that.

WORKS ON Managed Your own server On-Premise Deployments ↗
Secrets

Secrets and data

Hidden environment variables

Mark an env var as secret, and the dashboard hides its value. Values are stored encrypted.

WORKS ON Managed Your own server On-Premise Deployments ↗

Keys stored encrypted

Storage keys for your backups and your Odoo Enterprise token are stored encrypted. After you save them, they're never shown again.

WORKS ON Your own server On-Premise Docs ↗

Database logins that stay on your server

If you use your own managed PostgreSQL, you type its login on your server. It stays there, and we never see it.

WORKS ON Your own server On-Premise Backups ↗

AI agents that can only read

An AI agent linked to Skysize can read logs and charts. It can't change a thing, and it never sees your env vars.

Infrastructure

Your servers and your network

HTTPS on every domain

Every custom domain gets an HTTPS certificate, and we renew it for you. There's no switch to forget.

WORKS ON Managed Your own server On-Premise Docs ↗

Protection from attacks

On our managed cloud, traffic goes through Cloudflare by default. That blocks attacks that try to flood your site.

WORKS ON Managed Docs ↗

No open port for us

Our agent on your server calls out to us over an encrypted link. You don't open any port for us to come in. Its certificate renews on its own.

WORKS ON Your own server On-Premise Docs ↗

Your server runs only your projects

A server you connect is tied to your account. No other customer's Odoo is ever placed on it. Our own platform keys are never sent to it.

WORKS ON Your own server On-Premise Docs ↗

Red Hat family with SELinux on

Run on RHEL, Rocky Linux or AlmaLinux 9 and later. The installer keeps SELinux turned on and adds the rules Skysize needs. It never turns SELinux off.

WORKS ON Your own server On-Premise Docs ↗

Your Odoo keeps running if you stop paying

If your subscription ends, we never reach in to shut anything down. Your Odoo and your data stay up on your server.

WORKS ON Your own server On-Premise Docs ↗

API tokens with limits

Tokens for scripts can have an end date. You can limit each one to the API or to AI agents. You can also make it read only.

WORKS ON On-Premise
Watched for you

Checks on your Odoo

Default admin password

Every hour, we check whether your production admin still uses the password "admin". We never try to log in, and the password never leaves the server.

WORKS ON Managed Your own server On-Premise Monitoring ↗

Many failed logins

If many logins fail in a short time, the Health tab tells you. Someone may be guessing passwords.

WORKS ON Managed Your own server On-Premise Monitoring ↗

ISO 27001 certified, as a company

Skysize holds ISO 27001 as a company. You can see the certificate and our security facts in our Trust Center.

Visit the Trust Center →
Which product has what

Where each feature works

Roles, groups and Developer access
Two-factor sign-in
Audit log of Odoo logins
Hidden environment variables
Cloudflare in front
No open port for us
API tokens for scripts
Built by former Odoo engineers ISO 27001 certified Support with a formal SLA
Questions

Frequently asked

Can a contractor see our production data? +
Not with the Developer role. It only covers test branches. It gives no access to your live data, staging, settings or backups.
Do you need access to my server? +
No port is opened for us. Our agent on your server calls out to us, and it only runs the jobs you ask for: builds, backups and restarts.
Who can log in to our Odoo from the dashboard? +
Project admins. They can log in as your staff or as portal users. Each login is recorded in the Audit tab, with who, as which user, on which database, and when.
Where can I see your ISO 27001 certificate? +
In our Trust Center, at trust.skysize.io.
What happens to my server if we stop the subscription? +
Your Odoo keeps running. New builds and backups stop until you renew. We never shut anything down on your server.

Need to fill in a security form?

Send us your questions. We'll answer them for your setup, with the facts your IT team needs.