A staff account without two-step sets up an authenticator app or a passkey inside the console at its first sign-in, with recovery codes shown once. Every staff sign-in records whether a code, a recovery code or a passkey was used, and so does every change to a staff account’s factors. Turning off the last factor ends the console for sessions made with it.
When retention deletes a message, a file that a canvas, whiteboard, draft, bookmark, forum thumbnail or call recording still shows is kept until nothing does, and no file goes while a data export is being made. Files earlier retention runs left on no message are cleared a little at a time. In Kemble Work, an incoming webhook whose maker’s account was deleted stops posting.