Settings

Settings is where owners and admins configure the lab. Members and auditors cannot change lab settings, but anyone can turn on two-factor sign-in for their own account.

Lab profile

Lab name, accreditation body, certificate number, next assessment date and time zone. The next assessment date drives the “days to assessment” counter on the dashboard and appears on the cover of the assessor pack. Your accreditation body also selects your rule pack.

Rule pack

Shown read-only with its name and version. A rule pack holds the defaults for your accreditation body: lead times, grace periods, required fields, the expected document checklist and review intervals. AccreditBook launches with the generic ISO/IEC 17025:2017 pack. To change pack, contact us.

Retention rules

A table of how long each record type is kept, in years, with the basis (for example your body’s policy). The default is 6 years, which covers a three-cycle assessment window. When a record reaches the end of its retention period it appears in the due list for an owner to confirm deletion. Nothing is deleted automatically. See Clause 8.4.

Weekly email

On by default. Choose the day; Monday is the default. The email lists lapsed, overdue and due-soon items, the same as the dashboard due list.

Users and roles

Role	Can do
Owner	Everything, including billing and deleting the lab. A lab always has at least one.
Admin	Everything except billing and deleting the lab.
Member	Create and edit records in every module. Cannot change settings, delete records created by others or export the pack.
Auditor	Read every record and file and download the assessor pack. Cannot change anything.

Invite by email; invitations last 7 days. Owners, admins and members count toward the user limit of 5. Auditors do not, so you can give your assessor or a consultant their own read-only login.

Security

Turn on two-factor sign-in with an authenticator app (TOTP). It is required for owners once the lab has a paid subscription. See Security.

Data

Export everything builds a full export, including the change history and deleted records. See Data export.

Delete this lab is for owners only and asks you to type a confirmation. The lab becomes read-only, you receive a link to a full export, and all records and files are removed 30 days later.