Corp & Project Admin: Organization Governance & Multi-Tier Workspaces

1. The Why: Individual Freedom vs. Company Coordination

As teams grow from solo professionals into departments, client agencies, and larger organizations, two competing needs appear:

1. The Individual's Need for Speed: Makers, designers, and engineers need quick, simple task management without filling out 10-field forms or dealing with complicated permission setups.
2. The Organization's Need for Oversight: Leadership and operations need centralized billing, clear data policies, visibility into cross-team work, and activity logs for compliance and security.

DoneIsGood balances these needs with a clear three-tier structure:

• Team members work inside their chosen Matrices quickly and simply.
• Matrices roll up cleanly into Projects (initiatives, client accounts, or sprints).
• Projects and user seats are managed centrally by the Corp (Organization Container).

2. The 3-Tier Organizational Architecture

flowchart TD
    Corp["🏢 CORP: Root Organization Container
• Tier: Project or Enterprise • Global Owners & Corp Admins • License Pooling"]

    Corp --> ProjA["📁 PROJECT ALPHA: Mobile App V2
• Project Lead & Admins • Scoped Team Members"]
    Corp --> ProjB["📁 PROJECT BETA: Client Deliverable
• Project Lead & Admins • External Contractors"]

    ProjA --> M1["📊 Matrix 1: Core Sprint"]
    ProjA --> M2["📊 Matrix 2: QA & Launch"]
    ProjB --> M3["📊 Matrix 3: Deliverable Board"]

    style Corp fill:#eef2ff,stroke:#6366f1,stroke-width:2px,color:#1e1b4b
    style ProjA fill:#f0fdf4,stroke:#22c55e,stroke-width:1.5px,color:#14532d
    style ProjB fill:#f0fdf4,stroke:#22c55e,stroke-width:1.5px,color:#14532d
    style M1 fill:#ffffff,stroke:#cbd5e1,stroke-width:1px,color:#334155
    style M2 fill:#ffffff,stroke:#cbd5e1,stroke-width:1px,color:#334155
    style M3 fill:#ffffff,stroke:#cbd5e1,stroke-width:1px,color:#334155

1. The Corp (Organization Container)

The top-level entity representing your company, agency, or division (e.g., "Acme Innovations").

• License Pooling & Effective Tier: When team members join your Corp, they automatically inherit the Corp’s tier (Project or Enterprise) as their effective tier. Their personal quotas immediately expand (up to 25–999+ matrices, 1,000–9,999+ tasks per board, and 30-day trash retention) without requiring individual subscription purchases.
• Single-Corp Containment: A user can belong to only one Corp at a time. This architectural safeguard prevents accidental intellectual property leakage between client organizations or competing corporate accounts.

2. Projects (Initiative Workspaces)

Workspaces established within the Corp to group related matrices, documentation, and personnel (e.g. "Website Relaunch", "SOC 2 Certification", or "Client Alpha").

• Delegated Project Administration: Corp Admins can appoint specific team leads as Project Admins. A Project Admin has full authority to invite, assign, and manage members within their project without granting them top-level corporate admin privileges.
• Granular Member Scoping: Users are assigned only to the specific projects they work on, preventing organizational noise and protecting confidential initiatives.

3. Project-Linked Matrices

In addition to private boards and individually shared boards, DoneIsGood supports Project-Shared Matrices.

• When a matrix is linked to a Project, all current and future members of that project immediately gain access to it.
• Instant Team Onboarding: When a new team member or contractor joins a Project, they immediately see all associated project matrices in their list—without anyone having to send separate invitations for every board.

3. Key Admin Capabilities & Step-by-Step Walkthrough

How to Access the Corp & Project Management Dashboard

1. Click your Settings dialog in the bottom left (desktop) or from the Menu icon (bottom right of navigation bar on mobile) and select Teams.
2. Under your subscription tier information, click the purple [ 🏢 Manage Corps & Projects ] button (visible to users with Project or Enterprise effective tiers).
3. The dedicated management dashboard opens with five specialized tabs: Overview, Members, Projects, Matrices & Archives, Settings, and Audit Log.

Step 1: Member Management & Invitations

Under the Members tab, Corp Admins have complete control over user seats and governance:

1. Click [ + Invite Member ].
2. Enter the team member's email address and assign their initial role:
   • Corp Admin: Can manage all organization settings, invite/remove any corp member, create projects, and view compliance audit logs.
   • Member: Regular corporate user. Can join assigned projects, collaborate on project matrices, and enjoy elevated tier limits.
3. The system dispatches a cryptographically secure 7-day invitation link.
4. Instant Offboarding: When an employee or contractor departs, set their membership status to disabled with one click. Their access to all corporate matrices and projects is revoked instantly, while all historical task assignments, time-tracking entries, and completion records are preserved intact.

Step 2: Creating Projects & Assigning Workstreams

Under the Projects tab:

1. Click [ + Create Project ].
2. Enter the project name and strategic description.
3. Appoint one or more Project Admins (Project Leads).
4. Add Corp members who need access to this specific initiative.
5. In the Project Matrix tab, select which matrices belong to this project container. Matrices can also be converted to project sharing directly from the board’s Share Matrix menu by setting the sharing mode to Project.

Step 3: Enterprise Compliance & Tamper-Evident Audit Logging

For organizations subject to internal security policies, client SLAs, or formal compliance frameworks (such as SOC 2, HIPAA, or ISO 27001), the Audit Log tab provides transparent operational accountability:

• Comprehensive Tracking: Logs mutations across five key entity types:
  • task (created, edited, deleted, moved across quadrants)
  • matrix (created, renamed, archived, deleted)
  • project (created, updated, archived)
  • corp-member (invited, role changed, disabled)
  • project-member (added, removed, role updated)
• Detailed Diff Inspections: Click any audit record to expand a visual before-and-after diff showing exact field-level modifications, timestamps, and the identity of the acting user.
• 1-Click CSV Export: Click [ Download CSV ] to export filtered audit trails for compliance auditors, monthly client billing verifications, or internal security reviews.

Step 4: Indefinite Data Retention & Project Archiving

Unlike personal matrices that move to the Recycle Bin when no longer needed:

• Permanent Project Archiving: When an initiative concludes, Project and Corp Admins can mark the matrix or project as Archived.
• Protected Against Purge: Archived corporate matrices are excluded from active dropdowns to prevent clutter, but are never permanently purged by background retention jobs. They remain searchable and restorable indefinitely.
• Extended Trash Recovery: Tasks deleted within corporate matrices enjoy an expanded 30-day retention window (compared to 1 day for Free and 7 days for Pro).

4. Tier Comparison: Project vs. Enterprise

5. Security Best Practices & Administrative Guidelines

1. Enforce the Principle of Least Privilege:
   • Reserve the Corp Admin role for organization directors, executive operations, and IT administrators.
   • Use Project Admin roles for day-to-day squad leads, Scrum Masters, and agency account managers.
2. Standardize on Project Sharing over Individual Board Invites:
   • Avoid sharing company matrices as one-off individual shares (sharingMode: 'individual').
   • When boards are linked to a Project, access is automatically audited, governed, and revoked in sync with the user's project membership.
3. Safe AI Operations:
   • External AI agents connected via the Model Context Protocol (MCP) or cursor integrations are strictly held to read-only constraints on shared boards, preventing autonomous tools from deleting or altering team milestones without human approval.
4. Quarterly Audit Reviews:
   • Use the Audit Log filter to review role elevations (update on corp-member) and matrix archiving events at the end of each fiscal quarter. Export the CSV for corporate compliance records.

6. Summary Checklist