Waypoint Claims
Waypoint Suites / Admin Portal

Your organization’s own control room

Who works in the system, what each person may open, how people sign in, which outside accounts your organization brings, and how organization-wide rules behave — decided by your own administrators.

Every organization has the Admin Portal; it is never sold separately. It also reports across every portal your organization holds and keeps your organization-wide audit trail.

Walk your own settings What it solves for
An administrator reviewing the Waypoint Admin Portal dashboard

Four Things Your Administrators Control

The perimeter
Identity
Users and Sign-in
Invite one person or up to 500 from a spreadsheet, with one email and one password for every portal ticked. Authenticator codes are required for administrators and adjusters, with no setting to weaken them.
Read more ↓
Clients
Clients and Letterhead
Every client your organization handles claims for, each with its own logo, header and signature block on letters and emails.
Read more ↓
Access
Permissions
Person by person, which portals each holds; role by role, which pages each role sees in every portal. Every unlocked role starts with no pages.
Read more ↓
Accounts
Outside Accounts
Your AI key, phone company, email senders, company sign-in, encryption key and vendors — each entered once, with a real test and a full change history.
Read more ↓

None of these depends on somebody remembering a procedure. The browser hides what a role lacks, and every server door checks again.

The administrative surface

Where Your Operating Policy Stops Being A Document

The thresholds the platform enforces are your organization’s own settings — authenticator rules, roles, senders, licensing states, masking periods — because a shipped default is a guess about how your business runs.

Each change is written to the audit trail under the administrator’s name, with the old and new value. The settings themselves become the surface an auditor examines.

Sign-in and Identity
Two-step sign-in that no setting can weaken.
Password sign-in from a 48-hour invitation, or your company’s own login. Every page request checks that the session passed the code step.
Authenticator Codes
Always required for Super Admin, Org Admin, Admin, Manager, IT, Adjuster and Team Leader; your administrator turns it on for any other role. Ten recovery codes at set-up, and an audited reset for a lost phone.
Company Sign-in
OpenID Connect or SAML 2.0. Sign-in only: it admits people who already have an active seat, and never creates one.
Directory Provisioning
SCIM 2.0: your directory opens, updates and switches off seats. It can never make an administrator, and “delete” means deactivate.
Idle Sign-out
15 minutes with no activity, after a 2-minute warning that keeps what was typed, and an 8-hour cap on any session. Nothing is kept in the browser.
Clients, Registry and Reporting
Many clients from one account.
An adjusting firm or TPA keeps every client it handles claims for in one place, each walled from the others.
Client Letterhead
Logo, address, company header and signature block per client, with a live preview.
Platform Registry
Named business units or books — “Acme Property Program” — each tied to a client and used to label a person’s access.
Reporting Across Portals
Reports that read across every portal your organization holds, as branded workbooks on demand or on a schedule — including Entitlements in Force, never a plan name or price.
Permissions
Least privilege by default.
Nobody sees a page until your organization says so, and your administrators stay in control.
Role × Page Matrix
A tab per portal and a table of pages against roles. Each tick saves at once and applies to your organization only.
Deny By Default
Unlocked roles start with no pages. Super Admin, Org Admin and Admin always hold every page of every portal you subscribe to.
Named Custom Roles
Add your own roles, each its own column. A retired custom role keeps its record.
Per-person Switches
Grant one named person one thing beyond their role — releasing held email, editing licensing states, SIU access.
Integrations, Your Key and the AI Switch
Your accounts, your key, your switch.
Every outside account is entered once, here, and applies across all of your organization’s portals.
Outside Accounts
Email senders, sign-in system, AI account, phone company and vendor lanes — credentials stored locked and never shown again.
Your Encryption Key
Personal data locked under a key in your own cloud account, which you can revoke from your own console.
Who Sees Which Details
A grid of roles against names, addresses, phones, emails, dates of birth and identity numbers.
The AI Switch
Starts off, and cannot turn on until Waypoint has recorded your organization’s contract sign-off.
Configuration

Your settings. Your changes. No ticket required.

Your administrators set organization-wide rules themselves, and every change is written to the audit trail under their name with the old and new value. The few things Waypoint switches — plans and entitlements — are reported to you, never hidden.

Organization-wide settings are changed by your own administrators, with no service ticket and no development cycle. Plans and entitlements are switched on by Waypoint; the Admin Portal reports them and never changes them.

Yours to set, without calling us
Users & Invitations Roles & Permissions Authenticator Rules Company Sign-in Directory Provisioning Encryption Key Personal-details Grid AI Switch Email Senders Branding & Forms
Deactivating a person switches their account off on the server — they can no longer sign in — and nothing about them is deleted. Their claims, notes and audit trail stay.
A platform settings screen on a laptop with configuration, audit log and status panels, beside servers behind a padlock shield

The administration questions this portal answers

Complaint, answer, page

Each answer is a page in the Admin Portal, and each change made there is audited with who made it and the old and new value.

Data access and privacy
"Anyone with a login can see everything."
Deny by default: every unlocked role starts with no pages, and a per-role grid decides who sees full dates of birth and identity numbers.
Permissions
Identity and communication
"Our invitations arrive from a vendor domain."
No sender, no invitation: invitations go only from your organization’s own staff sender address — there is no default sender.
User Management
Offboarding
"Leavers keep access for days."
Your directory switches the seat off and the person cannot sign in from that minute; an administrator’s deactivation takes effect on the server at once.
Directory Provisioning
Entitlement transparency
"We are not sure which portals we are paying for."
Entitlements in Force lists every feature and add-on your organization holds, by key — never a plan name or price.
Reporting
Historical integrity
"We cannot prove who changed what."
An append-only audit trail of every recorded action across your portals, which even administrators cannot erase, with personal details protected inside it.
Audit Log

Where the Admin Portal connects

What is decided here applies across every portal your organization holds.

Claims Portal Roster, licensing, events, bordereaux and invoicing — the operation behind the claim files. Waypoint Center Where the page grants you set decide what each adjuster can open. AI In Waypoint The four gates — including your own AI switch, which starts off.

Challenge us: change a setting live

Bring a constraint you cannot change yourself in your current system — a role, an authenticator rule, a sender address. We will change it in the Admin Portal in front of you and show the audit row it writes.

Book a technical walkthrough Explore all eight portals