herbeID

One sign-in for every herbe app

Your team signs in once, without passwords, and you decide in one place who may open which app. Sign out once and every app follows within minutes.

A lynx watching from behind a snow-laden spruce branch

Sign in the way your company works

Microsoft Entra ID single sign-on

Your people use their work Microsoft account. You trust your company's tenant once.

Passkeys

Fingerprint, face or device PIN instead of a password. A passkey counts as both steps of two-step sign-in.

Email link or code

No password to remember or leak: a one-time link or code, valid for 15 minutes.

Two-factor authentication

Add an authenticator app as a second step, with recovery codes.

Latvian eParaksts

Link your eParaksts once and use it to sign in.

Sign out everywhere

End every herbe ID sign-in and app connection at once, from your own account.

Access, in one place

People join by invitation only. Give each person access to one app or all of them, and take it away just as fast. What someone may do inside an app stays that app's own rule.

  • Organisations, members and admins, with no self-registration
  • Access per person, per app
  • Dangerous actions ask you to prove it is you, right now
  • An append-only, hash-chained audit log

The gate for AI assistants

herbe ID is how Claude, ChatGPT and Codex reach your herbe apps, and it decides whether they may. AI is off for every app until an admin switches it on, and an assistant always acts with the person's own rights, never more.

  • A per-app AI switch, off by default
  • Optional anonymous mode: customer, supplier and contact names are swapped for codes before the AI sees them (pseudonymised, not anonymised)
  • Disconnect an assistant at any time
About herbe assist

Questions we hear first

Is there a password?

No. You sign in with an emailed link or code, a passkey, your work Microsoft account or eParaksts. Nobody can register themselves: people exist on herbe ID because someone invited them.

Does herbe ID decide what people may do inside an app?

No. herbe ID tells an app who you are and whether you may reach it. Your role, your customers and your rights inside the app stay the app's own business.

Can an AI assistant see our data?

Only if an admin has switched AI on for that app. It is off by default, and the assistant then acts with the person's own rights, never more.

Can anyone edit the audit log?

No. It is append-only and hash-chained, and no screen edits or deletes a row.

One sign-in, every app.

We create your organisation on herbe ID. You invite your people and trust your Microsoft tenant.