Organisations

Active organisation context

Every SemaFore session runs under one active organisation at a time. The active organisation controls which members, conversations, groups, broadcasts, and notifications you see.

Multi-organisation membership

A single user account is identified by phone number and can be a full member of more than one organisation.

In the mobile app, users switch between organisations with a workspace-style organisation switcher. Each context shows only that organisation’s members and conversations.

What administrators can see

An organisation administrator manages only their own organisation. They can invite members, approve or deny device registrations, revoke access, manage groups, send broadcasts, review audit logs, and configure organisation-level settings for their organisation.

Administrators cannot see whether a member also belongs to another organisation.

Tenant isolation

Multi-organisation membership does not weaken tenant isolation. A user sees another organisation’s content only if they are explicitly a member of that organisation and have switched to that organisation context.

Cryptographic identity

The user’s device keeps one cryptographic identity across organisations. The device has one key bundle, containing its Identity Key, Signed Pre-Key, and One-Time Pre-Keys.

Organisation membership controls access to members and conversations. The cryptographic identity belongs to the device, not to an individual organisation.