Loading this page
Opening the page. The page structure is ready while the last details arrive.
Loading this page
Opening the page. The page structure is ready while the last details arrive.
Neo operations OS
Each business is separated inside the database, and access is limited by role. Workers see the information they need for their work — not provider funding or costs.
01
Database rules scope provider records to the business a signed-in person is working in.
Support access needs a recorded reason, approval and an end time. The access is written to the security history.
Important changes retain who made them, when they happened and the context needed to understand them later.
Your password is hashed with scrypt and a random salt — we cannot read it, and it never appears in a log or an email. Forgotten it? We email you a link instead.
02
Working at Neo does not provide standing access to provider records. Support access requires a written reason, approval by another person and an end time, and the access is recorded in the security history.
Written in full, not a ticket number. It appears in your own security log.
The person asking cannot be the person approving.
Access expires at the time it was granted for. Nobody has to remember to remove it.
Every time Neo looked at your records is listed in your business settings, with the reason and who approved it.
03
You sign in with your work email and a password. If you forget it, we email you a link that signs you in without one — so there is no reset form to get stuck in.
It is hashed with scrypt and a random salt before it is stored. Nobody at Neo can see it, and it never appears in a log, an error or an email.
The forgotten-password link signs you in a single time and expires after 24 hours.
Being signed in lasts 12 hours, then you sign in again.
A wrong password and an address that is not on Neo give exactly the same message, so sign-in cannot be used to discover who has an account.
04
No participant or worker personal information is written to logs, error reports or usage tracking. Emails from Neo name your business, never a person receiving support.