The database decides who sees what.
Not the screen, not the extension, not a service: the access rules live in the database, and they hold for people, for Pan, for agents and for external assistants, who work as the person who called them.
How it is built
The rules live in the database.
Who sees a page, who edits it, who shares it: the database decides, on every request. A screen grants nothing: if the database says no, it is no.
Roles and access, page by page.
Four default roles, roles you write, access that expires on its own. Before sharing, What would they see…? says in words what a person can do. How it works.
Reserved values do not arrive.
A column with a padlock is seen to exist, but its values are read only by people with the capability to read them: for the others they are not hidden by the screen, they are not sent.
Keys live elsewhere.
Pan’s key, the services’ secrets, the mailboxes’ passwords: a separate service seals them, the vault, and not a person’s editor, where the terminal runs too. A code for an assistant is shown once, and only its fingerprint stays in the database.
Every service has a role of its own.
The services next to Fallthere each work with a database role that can do few things. When they work for a person, they do so with that person’s token and rules.
Outside text does not command.
The mails, pages and files Pan reads reach the model between boundary marks: it is text to read, not instructions to carry out. The same holds for what arrives at the “panfold” command.
Pan asks, before writing.
Tools that write in an outside service ask permission: this time, for this conversation or always, if you say so. What Pan proposes, a to-do or an agent, is created only with your tap.
A log, without the content.
The database writes every access grant and every action done on behalf of an assistant, a job, a channel or the phone: who, which action, when. Never the content. A line once written is not changed or removed.
Guests only see the room.
Whoever joins a call with a link sees nothing else: no conversations, no spaces, no Pan. The link lasts twelve hours and can be cancelled.
An invitation never gives “Manages”.
Not even by mistake: the database rules forbid it.
You sign in with a password or a link.
Email and password, or a link by email that works once; with Google or Microsoft only where whoever runs the service has turned them on. Sign-ups are by invitation until they open. Whoever gets the email or the password wrong always reads the same sentence, and the pages do not say whether an address already has an account.
Two-step verification.
An app gives a six-digit code and you turn it on from the Profile. Whoever has turned it on needs the code to sign in too: until they enter it, no workspace starts. If you lose your phone, a backup code works once and turns two-step verification off. Whoever leads the organization can ask everyone to use it: whoever does not have it turns it on before coming in, and whoever has it cannot turn it off.
The site does not follow you.
This site uses no cookies, has no measuring tools and loads nothing from other people’s servers.
You can go back.
What you remove goes to the trash, a document’s history rewinds, and an outside assistant deletes nothing. History and trash.
Where things are, and who answers
- This site
- On a Contabo GmbH server, in Munich, in Europe.
- Product data
- Where the data of whoever uses Fallthere lives we write here, precisely, when the product opens. Until it is decided we do not write it.
- Who answers
- Firmamento Technologies. The company’s details are in the legal notice.
- Certifications
- None, for now. We do not write acronyms we do not have.
- A security problem
- Write to info@firmamentotechnologies.com, with “Security” in the subject.
Related pages
The rules one by one, and the places where they show.
Frequently asked questions
Who sees my pages?
Whoever is in the level where you put them, and whoever has extra access that you gave. The database decides. Nobody else sees your Private.
Does Pan read everything there is?
It reads what you see, and only where you have “Use Pan”. It does so with your key, and for mails and pages the text reaches the model between boundary marks.
Where does the text Pan sends to answer go?
To the provider of the model you chose, with your key. Their terms and privacy notice are the provider’s: Fallthere has no key of its own in between.
Who can see a key I pasted?
Nobody: it is sealed as soon as you write it, and it opens only for you, in the service that uses it, for the time needed.
Can an external assistant delete anything?
No: nothing is deleted. It works as you, only where you chose, and every action stays in the log, without the content.
What does a call guest see?
Only the room: the faces, the screen, the questions, the notes. They do not see conversations, spaces, whiteboards or Pan.
Let’s see it together.
We show it to you live.
Book a demoYour mail app opens with a message already written. Or write to info@firmamentotechnologies.com.