Session timeouts automatically log users out after a period of inactivity. This helps protect sensitive sustainability data and prevents unauthorised access if someone steps away from their computer.
Activity includes any mouse movement or keystroke input while Altruistiq is the active browser tab. Activity in other tabs or applications is not registered.
Requirements
Permission: Manage Authentication Settings
By default, this permission is held by: Sustainability Administrator and Platform Administrator
Configure a custom session timeout
Click your profile icon (top right) → Organisation Settings.
Select Authentication & security.
In the session timeout section, enter your desired timeout length in hours.
Click Save.
Tip: The default session timeout is 1 hour. You can increase this to any value that suits your organisation's security requirements — there is no maximum limit.
What happens when a session times out
When the timeout period passes without activity:
The user is immediately logged out
They're returned to the login screen
They must re-authenticate to continue using the platform
Users are not given a warning before the timeout occurs, so consider setting a timeout length that balances security with your team's typical working patterns.
Considerations
Shorter timeouts provide stronger security but may interrupt users who step away briefly. Longer timeouts are more convenient but leave sessions open longer if someone forgets to log out.
For organisations handling particularly sensitive data or subject to strict compliance requirements, a shorter timeout (1–2 hours) is recommended.