Signing in and user roles

Updated August 14, 2026

ProClose has two roles, and they exist because a real agency book of business needs both a wide view and a narrow one. The agency owner needs to see everything that is out the door. A producer needs to work their own proposals without wading through everyone else's.

#The sign-in screen

The sign-in screen reads "Quote PDF in. Fee-safe, E&O-safe branded proposal out. Sign in to your workspace." Two demo account buttons sit above a plain email and password form:

  • Alex Carter, tagged Agency owner, sees the whole book
  • Jordan Reyes, tagged Producer, sees his own proposals

Click either demo button to sign in as that account with no typing required, or type an email and password into the fields and click Sign in.

Authentication is real. Every sign-in posts your email and password to the server, which checks the password against a scrypt hash using a constant-time comparison, so a wrong password and an email that does not exist take the same amount of time to reject, and a login attempt cannot be used to fingerprint which emails have accounts on your workspace. A successful sign-in gets a real server-side session: a random token sits in an HttpOnly cookie your browser's JavaScript can never read, and the server stores only a one-way hash of that token, never the token itself. Ten failed attempts from the same address within 15 minutes locks out further tries for a while.

Demo accounts

The public demo ships two real accounts, both on the fictional Summit Commercial Insurance workspace: alex@summit.example (agency owner) and jordan@summit.example (producer), password proclose-demo for both. These are genuine accounts, authenticated the same way any agency's accounts are, on a shared public demo workspace rather than one your agency owns. A real agency gets its own workspace with its own accounts and its own private passwords.

First sign-in and changing your password

A newly created account is flagged to require a new password on its first sign-in. The moment that account signs in, ProClose blocks the app behind a Set a new password screen, with no way to cancel out, until a password at least 10 characters long is set. That is how a producer ends up with a password nobody else ever typed into a spreadsheet or a message. The same panel, unforced, is the Change password control on the Security page, for changing your password any time after that.

#The two roles, by job

Agency owner (the admin role in the app, shown in the UI as "Agency owner"). This is the person who owns the whole book. Signed in as owner, you:

  • See every proposal in the workspace on the Proposals page, not just your own.
  • Are the only one who can edit the Vault: the fee schedule, the appetite guide, coverage standards, and preferred vendors. Only the owner can add a document to the Vault or change a cell in it.
  • See the dashboard subhead read "The whole workspace at a glance."

Producer. This is a producer working their own pipeline. Signed in as producer, you:

  • See only the proposals where you are the listed owner. The Proposals page subhead reads "Your proposals. The owner sees the whole book."
  • See the Vault, but every editing control is hidden and a Read only pill appears in its place. If you somehow trigger a vault edit anyway, the app blocks it with the message "Only the agency owner edits the vault."
  • See the dashboard subhead read "Your book at a glance."

Everything else, building proposals, presenting, exporting, is identical between the two roles. The role only changes what you can see and who can touch the Vault.

#Signing out

Signing out invalidates your session, both the cookie in your browser and its matching record on the server, and returns you to the sign-in screen. Your workspace itself does not reset: the Vault, your saved proposals, and your brand all live on the server, not in the session, so they are exactly as you left them the next time you sign in. Only your own signed-in state goes away, and you sign back in the same way you did the first time.