Skip to content
Public Demo Tenant

Click around the real product.
No signup, no sales call.

Sign in to a fully populated tenant: "TechNova Solutions", a fictional SaaS company mid-way through their ISO 27001 journey. Real workflows, real anomalies, real audit trails. Resets every night.

How to Sign In

Eight accounts. One password. Pick a role.

Each account shows the product through a different lens, from owner to external auditor. Same data, different permissions and dashboards.

Demo accounts, grouped by role
Tenant Owner Full access, including members, settings and the plan. Alex Rivera Persona: Executive
alex.rivera@technova-demo.test
  • The executive dashboard: readiness, risk trend and open gaps in one view.
  • Settings, then API tokens: create your own short-lived read-only token.
  • Plan and billing, on the Scale plan.
 /
Tenant Manager Runs day-to-day work across modules without org-admin scope. Sarah Kim Persona: CISO
sarah.kim@technova-demo.test
  • Risk register and the CISO reports with their month-over-month history.
  • ISO 27001 projects and the supplier assessment loop.
  • Offboarding violations and stale accounts.
 /risk
Dev Patel Persona: CTO
dev.patel@technova-demo.test
  • Software bills of materials and CVE findings.
  • The access graph and the AI agent inventory.
  • API tokens and the MCP connection for your own tools.
 /supply-chain/sboms
Ravi Menon Persona: CIO
ravi.menon@technova-demo.test
  • Assets and who can reach them.
  • Integrations: a Jira connection with no live credentials.
  • Single sign-on settings (read the page, changes are blocked in the demo).
 /assets
Noa Levi Persona: DPO
noa.levi@technova-demo.test
  • The privacy cockpit: register of processing, DPIAs and processors.
  • DSAR readiness.
  • Data dictionary and privacy categories.
 /privacy/cockpit
Tenant Contributor Creates evidence and updates records. Cannot manage members. Omar Haddad Persona: Operations
omar.haddad@technova-demo.test
  • Review queue and tasks assigned to you.
  • Joiner, mover, leaver cases under Lifecycle.
  • Evidence you can add as a contributor.
 /review-queue
Tenant Member Read-only view of the workspace, as an everyday team member sees it. James Thompson Persona: Not chosen
james.thompson@technova-demo.test
  • The first-run role picker: James has no saved persona, so you choose one.
  • Read-only pages; write buttons are hidden or refused.
 /
Tenant Auditor External auditor view: read and export, personal data masked. Lena Fischer Persona: Compliance
lena.fischer@technova-demo.test
  • The audit trail and its chain verification.
  • Evidence and ISO 27001 controls, read and export only.
  • Masked personal data in reports.
 /audit-trail

Login URL: https://app.autociso.io/console/auth/login

Open the demo console →
Who Can Do What

What each role can do.

Read from the product's permission matrix. The demo adds a shield on top of it: see the limits below.

Access level of each role per area of the product
Area OwnerManagerContributorMemberAuditor
Employees Admin Write Read Read None
Assets Admin Write Read Read None
Access reviews Admin Write Read Read Read
Audits Write Write Write Read Read
Evidence Write Write Write Read Read
Policies Write Write Read Read Read
Risks Admin Write Write Read Read
Suppliers Write Write Write Read Read
Reports Write Write Read Read Read
Members Admin Write None Read None
Settings Admin Read Read Read None

Write means create and update. Admin adds delete or approve. The auditor sees personal data masked.

Good to Know

What the demo does not allow.

No shared API or MCP token

There is no token to copy from this page. Sign in and create your own under Settings, then API tokens. In the demo it is read-only and expires within 24 hours; personal-data scopes are refused.

Member and sign-in changes are blocked

Inviting people, changing roles, removing members and editing single sign-on settings answer 403 DEMO_ACTION_BLOCKED. Deleting single employees and assets and tenant import are blocked too.

No email leaves the demo

Invitations, notifications and supplier mails are suppressed. Nothing you do reaches a real inbox or a real integration.

Scale plan only

The demo tenant runs the Scale plan so every module is open. Plan limits, upgrade prompts and billing flows are not shown.

Nightly reset, accounts included

Everything is rebuilt at 00:00 UTC, including the eight accounts. Sessions that started before the reset may need a new sign-in.

No Sign-In Needed

Open the pages your customers' guests see.

Auditors, suppliers, reviewers and employees reach these pages from a link, with no account. These demo links work for anyone and are restored every night. Links that are used up (a submitted assessment, an acknowledged policy) come back at the next reset.

Auditor portal

Read-only, reusable until the nightly reset.

Supplier assessment response

Works until submitted.

Policy acknowledgement

Works once per link.

Access review

One link per reviewer, until the campaign completes.

Reset Schedule

Fresh state every night at 00:00 UTC.

The demo tenant is rebuilt from a known-good baseline once per day. Anything you create, edit, complete, or delete during the day will be gone by morning, and the next visitor sees the same starting point you did.

That means you can click almost every button. Approve risks, close gaps, answer a supplier assessment, run an access review. The reset is the safety net, and the shield blocks the few actions that could lock other visitors out.

00:00 UTC

Tenant data removed

The demo organization database is cleared, together with the demo records in the central database.

00:00 UTC

Seed job runs

The canonical seed (the Go demoseed package, compiled into the server) re-creates the organization, the demo users and their roles, employees, assets, audits, ISO projects, risks, suppliers, privacy records, access history and AI agent access.

Minutes later

Tenant ready

You can sign back in. The demo accounts are rebuilt with the data, so a session that started before the reset may need a new sign-in.

Daytime

Shared with other visitors

Multiple people may be exploring the same tenant. If something looks unexpected, that is probably why. Log out and back in, or wait for the next reset.

Worth a Look

Things to click before you leave.

The seed data is built around real scenarios: an audit looming, an admin account nobody owns, a leaver whose access was never revoked. Pull on any thread.

A ghost account on a critical asset

Risk register, Audits

A service admin on the production database has no matching employee. See how it is scored and queued for investigation.

AI agent access

Access, AI agents

Inventory of AI agents and service principals with owners, review campaigns, decisions and an evidence pack.

ISO 27001, with certificate and body

ISO 27001, Compliance

Projects at different stages, control states and reliability, and a public certificate you can verify.

A verifiable audit trail

Audit trail

Audit entries are linked in a hash chain, and you can run the verification yourself.

DSAR readiness and privacy

Privacy

Register of processing, DPIAs, processors and how fast you could answer a data subject request.

Offboarding that reaches the apps

Lifecycle, Compliance cockpit

Leavers with access still active, and the tasks that close the gap.

CISO reports with history

CISO reports

Access concentration, stale accounts, privileged access changes and security debt, with older snapshots behind each.

SBOMs and CVE findings

Supply chain

Software supply chain: bills of materials, vendors and findings.

Partner portal data

Partner (system roles)

A demo partner firm with client organizations at different tiers. Visible to system roles only; you cannot sign in as a partner.

Common Questions

Before you sign in.

Is the demo really public?
Yes. The credentials on this page are intentional: they let anyone sign in to a sandboxed tenant called TechNova Solutions. There is no real customer data inside.
When does the demo reset?
Every night at 00:00 UTC. Anything you create, edit, or delete in the demo tenant, and the demo accounts themselves, are wiped and rebuilt from a known-good baseline.
Can I break the demo?
You cannot break it permanently: the nightly reset restores everything. But you may bump into other people's in-flight changes during the day. If something looks off, log out and back in, or wait for the next reset.
Does anything sent in the demo go to real services?
No. Email is suppressed, all demo identities use the @technova-demo.test domain, and integration credentials are placeholders.
Is there an API or MCP token I can use?
There is no shared API token. Sign in and create your own API token under Settings, then API tokens. In the demo it is read-only and expires within 24 hours.
What is blocked in the demo?
Inviting people, changing roles, removing members, editing single sign-on settings, deleting single employees and assets, and tenant import. They answer 403 DEMO_ACTION_BLOCKED. The demo runs the Scale plan.
Why share the password publicly?
Because the entire tenant is throwaway. There is nothing valuable inside, and the friction of a signup form is exactly what we want to remove for a "kick the tires" experience.
What if I want my own tenant?
Sign up for the free trial: your own data, your own org, no shared state, and the audit trail is permanent. Link below.

Liked the demo? Spin up your own.

Free trial, your own org, your own data, and an audit trail that never resets.

Start free → Open the demo