Controlled access.
Private records require an authorised sign-in.
Your workspace.
Your access.
Clear permissions. Protected sessions. Customer records kept within their access boundaries.
No reusable password.
Sign in with Google or a one-time email code.
Clear ownership.
Team views have separate access checks.
Workspace access
Client and application records are queried against the authenticated email. Access is available through Google or a one-time code sent only to an email already attached to a Klarnow record. Team-only views have a separate authorised-email check.
Email codes and sessions
Klarnow does not ask clients to create or reuse a password. Email codes expire in 10 minutes, work once and lock after five failed attempts. Requests are rate-limited without revealing whether an email exists.
Portal sessions expire after 12 hours. Browser cookies are HttpOnly, Secure and SameSite=Lax; the corresponding server token is stored only as a cryptographic hash and can be revoked on sign-out.
Browser and transport controls
Traffic is served over HTTPS with strict transport, content-type, referrer and framing controls. Camera and location stay disabled. Microphone access is available only on this site when you choose voice input and your browser gives permission.
Report a security issue
Email admin@klarnow.co.uk with enough detail for us to investigate. Do not access or alter another person’s data.