Your whole team in Cord, each person with the access they need.

You invite your team with per-section permissions, so whoever quotes doesn't have to touch your collections or your settings. With SSO, your team signs in with your company account, and each legal entity lives in its own organization.

Inviting your team and adjusting permissions, from Professional (5 users included; 15 on Scale; additional users at an extra cost). SSO with SAML from Scale. Creating another organization does not depend on your plan: each one has its own.

PER-SECTION PERMISSIONS

Whoever quotes doesn't need to see your collections.

Each person has ten permissions you turn on or off: Quotes, Approvals, Collections, Clients, Products, Reports, Settings, Payment settings, Refunds and Team. You start from a role (Admin, Rep or Read only) and fine-tune it. The permission decides the screen and the operation too: without Collections, a rep doesn't see Invoices or Payments, and can't operate them some other way.

  • Admin, Rep and Read only as a starting point
  • Ten permissions you adjust person by person
  • The account owner always keeps full access
Mark Russell
AdminRepRead only

Quotes and manages clients/products; no access to settings or approvals.

SellingQuotesClientsProducts
MoneyCollectionsPayment settingsRefunds
Control and analyticsApprovalsReports
AdministrationSettingsTeam

SEVERAL COMPANIES

Each legal entity, in its own organization.

If you run several brands or legal entities, each one lives in its own Cord organization, with its own country, currency, taxes, tax details, numbering and team. You switch between them from the selector without signing in again, and you can group new ones under the main one to keep them close. Each person only gets into the organizations you invited them to, with the role you gave them in each.

  • Its own country, currency, taxes and tax details in each one
  • Switch organizations from the selector
  • A different role per organization for the same person
MWorkspaceMateriales del Valle USA
WorkspacesMMateriales del Valle USAOwner
VValle Finishes
VValle Alto PropertiesOwnerCreate workspaceTeam settingsRRichard Vallerichard@mdvalle-usa.com
Name your account

You can change the name and country later in Settings.

Account nameMateriales del Valle CanadaCountry you operate inCanada

Sets your currency and your tax documents. You can issue commercial invoices from Cord; a connection to the local tax authority is not currently included.

Here's how it will lookMateriales del Valle USA
Materiales del Valle CanadaNewValle Finishes
BackCreate account

SSO WITH SAML 2.0

Your team signs in with your company account.

You connect Okta, Microsoft Entra or Google Workspace by pasting your provider's metadata XML, and Cord takes the sign-in URL and the certificate from it. Only emails from a domain you verified through DNS sign in through that connection, accounts can be created on first sign-in, and each person's role can come from an attribute your provider sends, such as their group. If you require SSO, password, Google, Apple and passkeys stop working for everyone except the owner. From the Scale plan.

  • Domains verified with a DNS record
  • Role assigned from the group your provider sends
  • Required SSO, with the owner as the fallback
SSO/Okta productionActive
Verified domains

Only emails from a verified domain can sign in through this connection.

Verifiedmdvalle-usa.comUnverifiedmdvalle-canada.caVerify

Check with your DNS provider and add a record with the following details.

Domainmdvalle-canada.caName@RecordTXTDNS codecord-domain-verify=9f2c41d7e08b3a6f5c1e9d2047b8a3c6Copy
Role mapping

Assign a Cord role based on the attributes your IdP sends (e.g. the user's group). The first matching rule wins.

groups=Cord-Adminsadmingroups=Salesvendedorgroups=Financeadmin
Default role (if no rule matches)lectura
ConnectionsOkta productionhttp://www.okta.com/exk8f2v1qLmZ7c4Nw697ActiveRequire SSORequire your team to sign in via SSO

Blocks password, Google, Apple, and passkeys for everyone except the account owner, who always keeps their password as a fallback.

Disable for 1 hour

WHY IT MATTERS

This is what roles & team actually changes.

cordhq.app/app/ajustes/equipo
Settings/Team & rolesTeam & permissionsInvite your team, define permissions and set access security.Team & rolesSSOSecurity
6 of 15 seatsExportAdd member
All 7Active 5Pending invitations 1Inactive 1
MemberRoleActivity
LGLaura Grant Youlaura@mdvalle-usa.comSuper adminLast seen 2 min ago
ASAndrew Sloanandrew@mdvalle-usa.comAdminLast seen today, 12:40 PM9 quote(s) in 30 daysEdit permissions
DSDerek Simsderek@mdvalle-usa.comSales repLast seen 18 min ago12 quote(s) in 30 daysNo accessEdit permissionsInvite again
MCMegan Colemegan@mdvalle-usa.comSales repLast seen yesterday, 7:15 PM14 quote(s) in 30 daysEdit permissions
TITom Irvingtom@mdvalle-usa.comSales repLast seen Sep 226 quote(s) in 30 daysEdit permissions
SRSophie Reedsophie@mdvalle-usa.comRead onlyLast seen Sep 18Edit permissions
Access revoked
Settings/Audit log

Immutable log of every change: what, when, and IP. Read-only — for your auditors.

equipo.revocado1 min ago · 189.203.45.112equipo.actualizadovendedor2 days ago · 189.203.45.112sso.exigir_activado6 session(s) revoked5 days ago · 189.203.45.112equipo.invitadosales3@mdvalle-usa.com6 days ago · 201.141.28.77factura.pago_registrado2500 USD1 week ago · 189.203.45.112org.actualizadaFields: require_2fa, session_timeout_min2 weeks ago · 189.203.45.112
cordhq.app/app/ajustes/seguridad
Settings/SecurityTeam & permissionsInvite your team, define permissions and set access security.Team & rolesSSOSecurity

Access rules for your whole team. Identity is encrypted; here you set the policies that apply to your organization.

Authentication
Require two-factor authentication (2FA)All members will need active 2FA to sign in. Protects your account even if a password leaks.
The policy is saved immediately. (Per-user 2FA is set up in Your account.)
SessionsInactivity timeout8 hoursAfter this much time without activity, sign-in will be required again.
Invitation domainsAllowed domainsmdvalle-usa.com, mdvalle.comComma-separated. If set, you can only invite emails from these domains. Leave empty to allow any.
23:48
Cord
Two-step verificationOpen your authenticator app and enter the 6-digit code.481027Incorrect code. Try again.VerifyLost access? Use a backup code
cordhq.app
cordhq.app/app/desempeno
PerformanceReportsTeam
CLOSED BY THE TEAMUSD 228,076approved, paid and invoicedAVERAGE CLOSE RATE35%of what each rep sentTOP PERFORMERLaura GrantUSD 81,240 closedACTIVE REPS5with an active team account
Ranking by repby amount closed
Sales repQuotesCloseClosedCollectedAvg. dealDays
1LGLaura GrantYouOwner3444%USD 81,240USD 65,518USD 5,4169 d
2DSDerek Sims4137%USD 60,435USD 43,120USD 4,02912 d
3MCMegan Cole2843%USD 46,800USD 39,876USD 3,9008 d
4ASAndrew SloanAdmin1932%USD 21,411USD 12,040USD 3,56915 d
5TITom Irving2218%USD 8,570USD 4,285USD 2,14321 d
—?Unassignedfrom before this report or via API7—USD 9,620USD 9,620——

FREQUENTLY ASKED QUESTIONS

Roles & team: the questions we hear most.

Yes. Permissions are per section, not per book of business: the whole team sees the organization's quotes and client directory, and permissions decide who can create, edit or approve them. What does disappear without its permission is Invoices, Payments, Collections and Reports. If you need to fully separate two books of business (two business units, for example), each one can be its own organization.

Free and Starter are single-user. From Professional you invite your team with 5 users included, Scale includes 15, and each additional user is billed separately; the price is on the plans page. The audit log is available from Professional and SSO from Scale. Requiring two-factor authentication, the inactivity timeout and invitation domains are on every plan.

Yes. Creating another organization doesn't depend on your plan, and each one has its own: you can keep your main company on Professional and a new brand on Free. Their data doesn't mix (clients, catalog, invoices and team belong to each one), and Cord does not add several organizations up into a consolidated report.

Anyone can sign in to Cord with Google, Apple, a password or a passkey. SSO adds that your company decides who gets in: only emails from your verified domains, with the role your identity provider says and, if you require it, with no other way in for your team.

The account owner always keeps their password as a fallback, even when SSO is required. With it, they can switch off the requirement for one hour so the team can sign in some other way; when the hour is up, SSO is required again on its own.

Invitations, permission changes and revoked access; SSO and integration connections; invoice issuing, sending and payments; and changes to the organization's settings, each with its date and the IP it came from. Anyone with the Settings permission can review it, from the Professional plan.

Explore the rest of the product.

Invite your team without handing over the keys to everything.

Team and permissions from the Professional plan; SSO from Scale.

See what you'll pay

Published pricing, with the fee for every payment in plain view.

Pricing details →

Start building

Start operating and sending quotes on the Free plan.

Integration options →