Playbook · not a customer quote
Remote startup access playbook
Distributed teams feel shared-key pain first. This playbook is the pattern we recommend — inspired by real rollouts like 9ance, without inventing logos.
- 1
Stop emailing the prod key
New hires get an invite + role. Keys remain only as temporary break-glass while you migrate.
- 2
One access habit across laptops
Browser sessions work from home, travel, and contractor machines without shipping private keys.
- 3
Turn on audit before the first customer review
CloudRelay trails answer who ran what — useful long before a formal SOC 2.
- 4
Codify offboarding
Revoke on last day. No scavenger hunt through authorized_keys on every host.
Checklist before you scale hiring
- No production private keys in 1Password shared vaults as the primary path
- Contractors time-bound by default
- Session audit enabled on production
- Offboarding includes Terminal revoke