For companies that handle sensitive data or operate in regulated industries, an unattended dashboard is a real security risk. If an admin or employee steps away from their computer without logging out, anyone with physical access- a visitor, a contractor, or someone walking past an open workstation- could view visitor logs, employee details, or account settings they shouldn't see. Inactivity-based timeout closes that gap by automatically logging users out of the Envoy web dashboard after a defined period of inactivity, so a session left open never stays open indefinitely.

For high-security organizations, this helps enforce least-privilege access, supports compliance requirements like SOC 2 and ISO 27001, and adds a critical layer of protection that doesn't depend on users remembering to log out themselves.

When users have been inactive in their Envoy web dashboard for the admin-defined inactivity period, they will be logged out automatically. This setting applies to both admins and employees and is defined at a company level.

By enabling inactivity-based logout, admins can prevent unauthorized access if someone has stepped away or isn’t using their computer.

If no action is being taken in the browser window, users will be logged out and redirected to the login page.

Once back on the login page, users will be able to restart their session by logging back in.

By default, this feature is off. For the best employee experience, admins should inform employees before enabling this feature. See our template here.