Settings
The Settings page allows organization administrators to configure their Claw GRC tenant, manage team members, set up integrations, and control billing.
Organization Settings
General
- Organization Name -- Your company name as displayed across the platform
- Slug -- URL-friendly identifier used in API paths and links
- Plan Tier -- Your current subscription plan (
free,starter,professional,enterprise)
Notifications
Configure notification preferences for:
- Evidence expiring soon (default: 14 days before expiration)
- New critical/high findings
- Policy approval requests
- Agent trust score drops below threshold
- Weekly compliance summary email
Team Management
Roles
Claw GRC supports the following roles:
| Role | Permissions |
|---|---|
owner | Full access, billing management, can delete organization |
admin | Full access except billing and organization deletion |
auditor | Read-only access to all data, can generate reports |
developer | Can manage evidence, findings, and tickets. Cannot modify frameworks or policies. |
Inviting Members
- Navigate to Settings > Team
- Click Invite Member
- Enter the email address and select a role
- The invitee receives an email with a link to join
Managing Members
Administrators can:
- Change a member's role
- Deactivate a member's account (preserves audit trail)
- Remove a member from the organization
Integrations
Claw GRC supports integrations with external tools:
| Integration | Status | Description |
|---|---|---|
| AWS | Available | Import CloudTrail logs, IAM policies, and configuration data |
| GitHub | Coming Soon | Import repository security scanning results |
| Jira | Coming Soon | Sync tickets bidirectionally |
| Slack | Coming Soon | Send notifications and alerts |
| PagerDuty | Coming Soon | Escalate critical findings |
Configuring AWS Integration
- Navigate to Settings > Integrations
- Click Connect AWS
- Provide your AWS credentials or configure cross-account IAM role
- Select which services to sync (CloudTrail, IAM, Config)
- Set the sync schedule
Integration credentials are encrypted at rest using GCP KMS and stored in Cloud SQL. They are never accessible after initial configuration.
Billing
Plans
| Feature | Free | Starter | Professional | Enterprise |
|---|---|---|---|---|
| Frameworks | 1 | 3 | All 11 | All 11 + custom |
| Evidence artifacts | 50 | 500 | Unlimited | Unlimited |
| Team members | 3 | 10 | 50 | Unlimited |
| Agents | 1 | 5 | 25 | Unlimited |
| Reports | Basic | Standard | Advanced | Custom |
| Support | Community | Priority | Dedicated | |
| Audit trail export | - | CSV | CSV + API | CSV + API + SIEM |
| SSO | - | - | SAML | SAML + OIDC |
Managing Your Subscription
Billing is managed through Stripe. Navigate to Settings > Billing to:
- View your current plan and usage
- Upgrade or downgrade your plan
- Update payment information
- View invoices and payment history
API Endpoints
Organization and member management is available through the API:
| Method | Endpoint | Description |
|---|---|---|
GET | /api/v1/org | Get organization details |
PUT | /api/v1/org | Update organization settings |
GET | /api/v1/members | List organization members |
POST | /api/v1/members/invite | Invite a new member |
PUT | /api/v1/members/:id | Update a member's role |
DELETE | /api/v1/members/:id | Remove a member |