Run outbound as a team. Not as a row of solo reps.

Admin owns billing, seat invites, workspace creation, integration credentials, and audit log access — typically held by 1–2 people per account (often the team lead and a backup). Manager owns the ICP rubric, team data, manager view access, and Slack routing rules within their assigned workspaces — typically held by sales managers or team leads scoped to specific regions/segments. Rep sees only their own queue and brief history. Each role can be scoped per-workspace, so the same user can be Manager in one workspace and Rep in another.

Yes — per-workspace role scoping is core to how the system is designed. Common pattern: someone leads NA outbound (Manager role on NA workspace) but is also a contributing rep on the Customer Expansion workspace (Rep role there). They see the manager view for NA, but only their own briefs in Expansion. Each workspace's permissions are independent — changing a role in one workspace doesn't affect others.

SSO is included on Team and Pro (no extra cost). We support Google Workspace, Okta, Microsoft Entra ID (formerly Azure AD), and any SAML 2.0 provider. Self-serve setup takes about 10 minutes — paste a metadata URL or upload a metadata XML, test with a single user, then enforce SSO for the whole account. SCIM provisioning (auto-add/remove seats based on directory group membership) is on Pro and adds ~30 min of setup with your IT team. We've done it ~200 times — happy to jump on a call to walk through it.

Every admin-level action and every permission change. That includes: seat invites and removals, role changes, workspace creation/deletion, ICP rubric edits (with diff), integration credential rotations, SSO config changes, API key creation/revocation, manager-view exports, and any data access by support staff (we log it when we look). Each entry has timestamp, user, IP, and the before/after delta where applicable. Audit log is retained for 12 months on Pro, exportable to CSV or pushable to your SIEM via webhook. Full security details →

One bill, per account. Workspaces are an organizational feature, not a billing unit — you pay for seats and the plan tier, not per workspace. So a Team account with 5 seats spanning 3 workspaces pays the same $199/mo as a Team account with 5 seats in 1 workspace. The invoice breakdown shows usage per workspace (briefs generated, signals fired, integration calls) for internal cost allocation, but the bill totals at the account level. Pro is the same — flat $599/mo regardless of workspace count.

Yes. Per-workspace white-label config replaces the Mama logo, primary brand color, and footer attribution on briefs, PDF exports, public shared URLs, and email digest exports. Mama branding is removed entirely from the brief itself — only the workspace owner's brand remains visible. We do keep a small "powered by" footer link on shared public URLs by default (helps with discovery), but that's also removable on Pro. Custom domains for shared URLs (e.g., briefs.yourbrand.com) are available on request — adds ~1h of DNS setup.