Who your organization wants reached when something is wrong — Security, Privacy and Operations contacts, each confirmed by a link before it is used.

Last updated: October 20, 2026 by Steve

Notification Contacts

Settings → Foundations → Notification contacts records who your organization wants reached when something is wrong with AccessPoint or its operation, such as a security advisory. You need the configuration.manage permission. These addresses stay in your tenant: AccessPoint never sends them to its publisher.

Prefer a role mailbox, such as security@, over a named person, so notices still arrive when someone changes role.

The Tabs

  • Security — security advisories about AccessPoint. A monitored role mailbox is the right choice. The page warns while no confirmed security contact exists.
  • Privacy — the privacy office. It is copied on severe advisories that require action, as a prompt to assess, never as a finding that personal data was affected.
  • Operations — service notices. Advisories are not sent here.
  • Advisory notices — the log of what was sent to whom.

Adding and Confirming a Contact

  1. Open the tab for the kind of contact.
  2. Add the address and choose the contact's notice language.
  3. Choose Send confirmation link. AccessPoint e-mails a link that expires after a few days.
  4. The person who holds the address opens the link to confirm it.

An address is used only after it is confirmed. The row shows Not confirmed, Link sent or Confirmed with the date.

What Sending Needs

Sending needs the notification sender mailbox (Settings → Setup) and e-mail notifications switched on. The page says when either is missing.

  • Setup — the notification sender mailbox.
  • Organization — the organization settings and intake mailboxes.
  • Features — the feature toggles.
←
Previous Repository Connectors
Next Payment Providers
→