> ## Documentation Index > Fetch the complete documentation index at: https://docs.get2dial.com/llms.txt > Use this file to discover all available pages before exploring further. # Security controls > The access-control, authentication, and audit mechanisms Get2Dial provides, gathered in one place for a review. The access-control and authentication mechanisms Get2Dial provides, gathered in one place — useful when answering a security questionnaire or planning your own access policy. ## How it works | Control | What it does | | ------------------------------------------------------------------- | ------------------------------------------------------------------------------------------- | | [Roles and capabilities](/account/roles-and-permissions) | Fine-grained, per-resource access (none/read/write), starting from built-in or custom roles | | [Multi-factor authentication](/account/multi-factor-authentication) | A second sign-in factor, optionally required workspace-wide | | [Single sign-on](/account/single-sign-on) | Sign-in through your own OIDC identity provider, with group-to-role mapping | | [Session policy](/account/session-policy) | Maximum session age, idle timeout, and concurrent-session limits | | [Audit log](/account/audit-log) | A record of who changed a user, role, or workspace setting, and when | | [Encryption and certificates](/voice/encryption-and-certificates) | TLS for carrier and SIP domain signaling; no media (SRTP) encryption today | ## When to use it Reach for this page when you're filling out a security review or deciding your workspace's baseline: which of these to require (MFA, SSO), and how tightly to scope roles for your team. ## What it affects Narrowing access here is the main lever available to satisfy an internal security review — see [Roles and permissions](/account/roles-and-permissions#what-it-affects). ## Next steps