How We Securely Access Your Zoho Account

At Relevate, we understand the importance of keeping your data safe and secure while enabling us to perform the necessary work on your Zoho account. In order to assist you with projects or provide support, we need to access your Zoho account, but we also prioritize security and confidentiality throughout this process.

Here’s how we ensure the secure access and management of your Zoho account:

1. Sharing Your Login Details Securely

To begin, you will need to share your Zoho login credentials with us. This is required so that we can carry out the work on your behalf. However, we recognize that different clients have varying risk profiles, and the security of your data is our top priority.

We implement stringent security measures tailored to your requirements, ensuring that access is always tightly controlled. Our system is designed to minimize the risk of unauthorized access, while making the process as seamless as possible for you.

2. Using Two-Factor Authentication (TOTP) for Added Security

One of the primary ways we ensure security is by utilizing Two-Factor Authentication (TOTP). TOTP provides an additional layer of protection by requiring a secondary authentication method, typically in the form of a time-sensitive code, in addition to your username and password.

To securely store and use your TOTP authentication details:

• Access the Zoho Accounts Portal: We begin by logging into your Zoho account via accounts.zoho.com.
• Enable Authentication Methods: If you haven’t already, we enable the necessary authentication methods, such as TOTP, to secure your account. This step ensures that we have the necessary credentials to access your account securely, even if your login password changes.
• Extract the Authentication Key: Once TOTP is enabled, we extract the authentication key from the setup URL. This key is critical for generating the authentication code and enabling us to log in to your Zoho account securely.
• Save the Authentication Secret in Our Vault: We securely store this authentication key in our encrypted password vault, ensuring that only the relevant team members have access to it. This vault is protected with strong encryption to ensure that the TOTP secret is never exposed.

3. Generating New Authentication Keys When Necessary

If for any reason your TOTP key needs to be refreshed or a new authentication key is required (for example, if your password is changed or re-authentication is needed), we’ll handle that securely:

• Generate New Key on the Same Refresh Sequence: We will initiate the refresh process and generate a new key based on the same sequence, ensuring that access is uninterrupted while maintaining security.
• No Need for Constant Contact: Once the authentication details are saved securely, we can log in to your Zoho account whenever needed without requiring your direct involvement or constant sharing of credentials. This allows us to work on projects or provide support without disrupting your workflow.

4. Secure, License-Free Access

By using this process, we ensure that we can work on your projects and provide ongoing support without taking up an extra user license or causing any interruptions for you as the primary user. You maintain control over your account, but we can execute the necessary work on your behalf with minimal impact on your daily operations.

Why This Process Is Secure

• Encrypted Password Vault: Your login credentials and authentication secrets are stored in a highly secure, encrypted vault. Only authorized team members have access to the necessary data, and all actions are logged and monitored.
• No Password Sharing: With this system, you do not need to constantly share your password with us. We securely manage the authentication process without needing your login details every time.
• Limited Access to Relevant Team Members: Only the team members working on your project or providing support will have access to the authentication keys, ensuring that your data is protected at all times.

Our Commitment to Data Security

At Relevate, your security is our priority. We adhere to the highest standards of data protection to ensure that your Zoho account remains safe while we provide you with the necessary support. By utilizing advanced security measures such as encrypted storage, TOTP, and secure vaults, we make sure that your sensitive data is always kept confidential and protected from unauthorized access.

If you have any concerns about security or how we handle your Zoho account, please don’t hesitate to reach out to us. We're here to help and ensure that you can trust us with the utmost confidence.