01
Protect your account with an authenticator
- 1Open your profile menu and choose Manage profile.
- 2Under Two-factor authentication, choose Set up authenticator.
- 3Scan the QR code in an authenticator app or enter the manual key. Keep it private.
- 4Enter the current six-digit code and choose Verify & enable.
- 5After signing in, enter a code whenever Proofly asks you to verify your identity.
Two-factor verification is optional. Once enabled, it protects your Proofly account, including access after social sign-in. Password reset emails do not bypass it. Keep access to your authenticator; self-service backup codes are not currently available.
02
Choose appropriate team access
In Settings, the owner can invite teammates as administrators or sales representatives, change their roles, remove access, and revoke pending invitations.
Owners control funding, payout defaults and team membership. Administrators handle day-to-day work and proof review. Sales representatives handle references, requests, messages and conversions but cannot review proof or change funding or team permissions.
Members share the workspace reference network and request history. Roles do not create private per-representative customer lists.
Team members
03
Payment information and test mode
The current Stripe setup sends financial-detail entry to Stripe-hosted pages rather than a Proofly card-number form. Proofly’s existing payment flows are test-only; they are not a live billing service.
Do not send card numbers, bank credentials, passwords, authenticator keys or verification codes through messages or uploaded proof.
04
Review access and activity
Owners can review team invitations, role changes, removals and proof-review activity in Settings. Remove access promptly when teammates leave.
Use a unique password, only follow invitation links you recognize, and review the company and account before accepting a request.
05
Public security information
Proofly’s Security page is owner-authored product information, not an independent certification or platform-issued trust report. No SOC 2, ISO 27001, HIPAA or other certification is claimed.
See the public Security page for the scope and limitations of this information.