Platform, security & integrations

Serious software, seriously secured.

Two-factor authentication, granular permission groups and database-enforced tenant isolation — plus email-to-enquiry ingestion and an AI connector for your live data.

Security

2FA, permission groups and database-level isolation

Sign-in supports authenticator-app two-factor with QR enrolment, and MFA secrets are stored encrypted. Put users in the Require-MFA group and two-factor stops being optional.

Inside the tenant, permission groups carry granular per-area rights — viewing and editing are separate permissions, so you decide exactly who can see and who can change each part of the system. Between tenants, Row-Level Security at the database enforces isolation on every single query.

  • TOTP two-factor with QR enrolment; encrypted secrets
  • Require-MFA group makes 2FA mandatory for chosen users
  • Granular per-area permissions; view and edit separated
  • Row-Level Security tenant isolation at the database
  • Email invites and password resets with branded templates

Email-to-enquiry

Forward an email. Get a structured enquiry.

Your tenant gets dedicated inbound addresses. Point your website form at one, or just forward a client’s email — AI parses it into a structured enquiry with the name, contact details, date, venue and the ask, and keeps the original message attached for reference.

Forwarded mail is handled properly: the parser reads through the forwarding wrapper and takes the enquirer’s details from the original message, not from you.

  • Per-purpose inbound addresses per tenant
  • AI parsing into structured enquiry records
  • Forwarded emails handled — enquirer details taken from the body
  • Original message kept against the enquiry
  • Set up from a panel inside the portal

AI + MCP

Ask an AI assistant about your own business

PyroPortal ships an MCP (Model Context Protocol) server. Generate a personal connector token from Settings → Integrations, add it to Claude or any MCP-compatible client, and ask questions of your live data: what’s low on stock, which shows fire this month, what a supplier order is waiting on.

Every call runs as you — permission-checked and tenant-scoped exactly like the web portal, with user management deliberately read-only over MCP.

  • Per-user connector tokens, managed in Settings → Integrations
  • Works with Claude and any MCP-compatible client
  • Same permissions and tenant scoping as the portal
  • Revoke a token at any time

Day-to-day polish

Numbered documents and an installable app

Every tenant gets its own document number series, so displays, enquiries and orders carry clean sequential references out of the box — the numbers your invoices and emails can refer to.

And the portal installs as an app: add it to a phone home screen and it opens full-screen, ready for the field. Contact details are tap-to-call, tap-to-email and open-in-maps throughout.

  • Per-tenant sequential number series on your records
  • Installable PWA — add to home screen on iOS and Android
  • Tap-to-call, tap-to-email, open-in-maps everywhere
  • Dark, high-contrast UI built for outdoor use

Common questions

How is access to our data controlled?
Every user belongs to permission groups with granular per-area permissions — viewing and editing are separate rights, so a crew member can see a display without being able to change your prices. There is no all-powerful admin flag. Tenant isolation is enforced with Row-Level Security at the database on every query.
Do you support two-factor authentication?
Yes — authenticator-app (TOTP) two-factor with QR-code enrolment. MFA secrets are stored encrypted. Add users to the Require-MFA group and they cannot sign in without completing 2FA setup.
How does email-to-enquiry work?
Your tenant gets dedicated inbound addresses (for example an enquiries address). Mail sent — or forwarded — to them is parsed by AI into a structured enquiry: name, contact details, date, venue and the ask, with the original message kept attached. It appears in your enquiries list ready to qualify.
What can I do with the MCP server?
Generate a personal connector token from Settings → Integrations and plug PyroPortal into Claude or any MCP-compatible AI client. The assistant can then query your live products, stock, displays, orders and reports — permission-checked and tenant-scoped exactly like the web portal.