Profile & Account

Workflow group: Account (user menu) · Sidebar: user menu → Profile Who sees this: Every adviser (their own account). Company Profile appears only for advisers in more than one company.

Your personal account page: identity, editable details and photo, and account security (multi-factor authentication). If you work for more than one firm, a second page lets you tailor how you appear under each company.

---

Profile - /profile#

• Intent: The adviser's personal account page: view identity at a glance, edit personal details and photo, and manage account security (multi-factor authentication). This is the default profile everywhere the adviser works.
• Who can access it: Every advisor (their own profile only).
• What you can do:
  • Edit personal details (the main form) and Save:
    • Upload a new profile photo (image files up to the size limit; uploaded directly to storage).
    • Edit first name, middle/other name, and last name.
    • Set your job role/title (clearing it removes your default title).
    • Edit your phone number.
    • Edit your address using the address lookup/search field.
    • Your email is shown but read-only.
  • Go to per-company settings - a "per-company overrides" button → /profile/company, shown only if you belong to more than one company.
  • Manage MFA in the security card:
    • Enable two-factor auth: confirm your password, then scan the shown QR code (or copy the secret key) into an authenticator app, save/download your one-time recovery codes, and enter a 6-digit code to finish.
    • When enabled: Regenerate recovery codes (re-auth with password + current 6-digit code, then view/download the fresh batch once) and Disable MFA (password + code). Download codes to a text file, or Dismiss the freshly shown batch.
    • Cancel out of any MFA step to return to the resting state.
• What you see: A hero card (large avatar or initials, display name, email, job role, a badge for the active company + your role there, an MFA on/off badge, and a "belongs to N companies" badge when relevant); a two-column area with the editable Personal details card and a sidebar summary (company count, MFA status, and the per-company link when multi-company); and a full-width Security (MFA) card.
• States:
  • Loading: a "loading" line until your details load; the security card shows a spinner while checking MFA status.
  • Success/error: toasts on save ("profile updated" / "update failed") and on each MFA action (enabled, disabled, codes regenerated, invalid code, re-auth failed).
  • Disabled: MFA action buttons disable and show busy labels while submitting; verify/confirm buttons stay disabled until a full 6-digit code (and password where required) is entered.
• Related pages / flow: Reached from the user menu. The sidebar link leads to /profile/company for multi-company advisers.

Company Profile - /profile/company (per-company overrides)#

• Intent: Lets an adviser who works for more than one company tailor the name, title, phone, and address that appear under the currently active company, overriding their default personal profile for that membership only.
• Who can access it: Only advisers who belong to more than one company. Single-company advisers are redirected straight to /profile (their personal profile already is their company profile). It only ever edits the membership for the company currently selected as active.
• What you can do:
  • Override your details for the active company and Save:
    • First name, middle/other name, last name.
    • Job role/title.
    • Phone number.
    • Address (via the address lookup field).
  • Each field is pre-filled with what you'd otherwise inherit; the placeholder shows your personal-profile default. Clearing a field and saving reverts it to inherit your default going forward.
  • Email is shown but read-only.
• What you see: A page header, a small identity strip (avatar/initials, the display name and job role that apply at this company, and the active company's name), and a card titled with the company name containing the read-only email and the override form. A hint explains that blank fields inherit from your main profile.
• States:
  • Loading: a "loading" line until your role for the active company is available; if you're single-company the page immediately redirects to /profile.
  • Success/error: toasts on save ("profile updated" / "update failed").
  • The form re-initialises automatically when the active company changes or when a stale profile snapshot is refreshed.
• Related pages / flow: Reached from the "per-company overrides" button in the /profile sidebar (or from the user menu when in multiple companies). Redirects to /profile for single-company advisers. The active company is chosen from the company switcher in the sidebar header.