Teams, roles and 44 fine-grained capabilities, one action each. Give a contractor one folder, require two-factor for the people who can delete things, and see who did what on a single timeline.
Roles are named sets of capabilities your team edits and resets. A folder share hands someone one corner of the fleet without widening what they can do elsewhere. Every action is enforced server-side, in the dashboard and over the API alike.
Everything belongs to a team and the URL names it. The Activity trail answers who, what, when and where, with filters that are links. Passkeys, two-factor policies per team or per role, breach-checked passwords and expiring API tokens are all in the product, with no shell and no database edits.
Answer three questions and pick a host, or install Deplo on a server you already have. It's free, and leaving is as easy as arriving. What you do with the money you save is your business.
