Team roles: admin, loan officer, processor, viewer

• Admin — everything: firm settings, branding, billing, templates, files, team management.
• Loan officer — files and templates, but not firm settings or billing.
• Processor — day-to-day file work (create files, review documents, send requests); no template or settings changes.
• Viewer — read-only everywhere; can't even see the Team page.

Invite people from Team → Invite (invites expire after 7 days). Seats are counted as active members plus pending invites against your plan's limit — the Team page shows usage, and deactivating someone frees their seat immediately without deleting their history. Every user can enable two-factor authentication under Security.