- Home
- Security
Security and data in Lovox
Protect sign-in to your account, set up access to work materials and review the change history. You can export board and task data from workspace settings.
Sign-in and devices
Two-factor protection
Turn on 2FA in security settings. After the email code, Lovox asks for a code from your authenticator app.
Save your backup codes. You’ll need them if you lose access to the app.
- Code from email
- To sign in, enter your email and a one-time code. You don’t need to create or remember a password.
- Passkey
- Save a passkey on your device and confirm sign-in with your fingerprint, face or PIN. With 2FA on, you sign in with the email code and the authenticator code.
- Active sessions
- Settings show your devices and when each was last active. End a single session or all sessions except the current one.
Access to tasks and docs
What a member is allowed to do
A role sets who can edit tasks, invite colleagues, change settings or see billing. Create your own roles and choose the permissions they need.
Which materials they see
Open a board or knowledge base section to the whole workspace or to selected people and departments. Search and reports respect these restrictions.
Administrators and members with the “View all content” permission also see private boards and published knowledge base materials.
Learn more about roles and permissionsPublic links and integrations

Public board
The board opens by link without an account, in view-only mode. Anyone with the link gets access. You can turn off publishing in the board settings.

Calendar subscription
A personal link sends tasks with due dates to an external calendar. To close access at the old address, generate a new link.

AI agent access via MCP
You create a token and choose the allowed actions. The agent works with the token owner’s permissions. You can revoke the token in settings.
Activity history
The workspace audit log and AI activity are available to members with the “Audit log” permission.
- Tasks
- Changes and their authors in the task history. Actions by automations and AI agents are marked separately.
- Workspace
- Changes to roles, team members and settings in the audit log.
- Automations and webhooks
- Rule runs, their results and attempts to deliver events to external systems.
- AI activity
- Who used AI, when and for what. Changes made via MCP are saved in a separate log.
Data export and deletion
Workspace export
Lovox creates a JSON file with boards, tasks, comments, time tracking, members and settings. A member with the “Export and import” permission starts the export.
The knowledge base, meeting recordings and the attachment files themselves aren’t part of this export. For attachments, it keeps links and file details.
The finished export is available for download for 7 days.
Account deletion
Delete your account in profile settings. You need to confirm it with a 2FA code or an email code.
If you own a workspace, first transfer ownership to another member or delete the workspace.
How long personal data is kept after deletion is described in the Personal Data Processing Policy.
Data protection questions
How can I better protect sign-in to Lovox?
Turn on two-factor authentication and save your backup codes. You can also sign in with a device key, a passkey.
What should I do if I lose a device with Lovox open?
Open the list of active sessions in account settings and end the session on the lost device. You can end all sessions except the current one.
Can I take my data out of Lovox?
A member with the export permission can create a workspace export. The finished archive is available for download for seven days.
