Skip to content

Sanctum

Permissions & Security · Seed

Control who sees what.
Down to every detail.

Granular role-based access control for your entire platform. Protect sensitive data while empowering your team.

A sanctum protects what matters most — Sanctum keeps your business secure and your team empowered.

Sanctum — Permissions
canopy
Dashboard
CMS
CRM
Scheduling
Commerce
Marketing
Roles & Access
Owner
1 member
Edit
Manager
3 members
Edit
Staff
8 members
Edit
PERMISSION MATRIX
Engine
Owner
Manager
Staff
CMS
Full
Full
—
CRM
Full
Full
View
Booking
Full
Full
Own
Commerce
Full
Full
View
Analytics
Full
View
View

Before & After

×
Without Sanctum

Your team has all-or-nothing access. Interns can see financial data. Part-time staff can edit settings. There's no way to limit access per role.

✓
With Sanctum

Sanctum gives you fine-grained control over who can see, edit, and manage every part of your Canopy platform — per engine, per feature, per data set.

Features

Everything you'd expect.
And a few things you wouldn't.

01

Role-Based Access

Create custom roles with specific permissions. Owner, Manager, Staff, Intern — whatever your business needs.

  • Pre-built role templates
  • Custom role creation with granular permissions
  • Per-engine access control
  • Feature-level permissions (view, edit, manage)
Roles & Permissions
Admin
Users
Billing
Settings
Data
Manager
Users
Billing
Settings
Data
Staff
Users
Billing
Settings
Data
02

Team Management

Invite team members, assign roles, and manage access from one central panel.

  • Email invitations with role assignment
  • Active session management
  • Login history and audit trail
  • Two-factor authentication enforcement
Team Members
MK
Maya Kim
maya@canopy.co
Admin
Just now
JR
Jake Rivera
jake@canopy.co
Manager
2h ago
AL
Ava Lopez
ava@canopy.co
Staff
1d ago
LC
Leo Chen
leo@canopy.co
Staff
3d ago
03

Data Protection

Protect sensitive customer and financial data with access restrictions and audit logging.

  • Field-level data visibility controls
  • Financial data access restrictions
  • Complete audit log of all actions
  • Data export controls by role
Audit Log
UserActionTimestamp
Maya K.Exported contact listMar 27, 2:14 PM
Jake R.Changed role: Ava → ManagerMar 27, 11:30 AM
SystemBackup completedMar 27, 3:00 AM
Maya K.Deleted draft campaignMar 26, 5:45 PM
Leo C.Logged in from new deviceMar 26, 4:12 PM

In Practice

Real businesses.
Real results.

Growing Team

The owner creates Manager and Staff roles. Managers see analytics and CRM. Staff see only their bookings and assigned tasks.

Result

Sensitive data is protected. Team members see exactly what they need — no more, no less.

Multi-Location Business

Location managers have full access to their location's data but can't see other locations. The owner sees everything.

Result

Data isolation per location. Central oversight. Clean separation of concerns.

Sanctum supports unlimited custom roles with 200+ individual permission controls.

Available in Seed

Sanctum starts at $49/mo

Get started today. Upgrade or downgrade anytime.