Sign-in in two steps

Sign-in lives at app.mygtos.com, separate from this marketing site. Two-step sign-in is part of the product today. We do not claim ISO, SOC or similar certifications on this page.

• Two-step sign-in on the GTOS app
• Access by role after sign-in
• Per-client data separation
• A clear split between the public site and the app

Why two-step sign-in sits in front of a travel system

A corporate travel platform holds more than a draft itinerary. It can hold organisation structure, approvals, spend, and documents related to a trip. Two-factor authentication, in the form GTOS actually offers, is two-step sign-in on the GTOS app. Access to a company's travel data is not only a password. After sign-in, access is still limited by role, and each company still sees only its own records.

Sign-in lives at app.mygtos.com, separate from this marketing site. That split is deliberate. The public site is for product information and demo requests. The app is where company data is reached, and where two-step sign-in applies.

What two-step sign-in does not replace

A second step at sign-in does not replace role-based access, and it does not replace per-client data separation. It also does not, by itself, equal a named single sign-on integration. SSO, if your company requires it, is scoped during implementation and discussed in a demo. We do not publish a list of identity providers or certified connectors on this page.

We do not claim ISO, SOC or similar certifications here. The controls we describe are the ones in the product: two-step sign-in, access by role, per-client separation, and an audit trail of requests, approvals and changes. Security questions to ask us, and any other vendor, are collected in the security guide.

For security reviewers and for programme owners

Security reviewers usually want to know where users sign in, whether a second factor is available, what happens after a successful login, and whether one client can see another. Those answers are above and on the Security page. Programme owners usually want to know that a leftover password is not enough to open travel data, and that a traveller cannot see finance's full workspace. Two-step sign-in and roles address those concerns together.

USD is the main currency on this site. Pricing is in USD and available on request.