Security Notifications

What security notifications do

When enabled, you get an email whenever:

• Someone signs into your Allison Voice account (including you — it's a record)
• Your account email is changed (both old and new addresses are notified)

Each sign-in notification includes the timestamp, IP address, and browser/device so you can quickly recognize whether it was you.

Turning notifications on or off

1. Click your avatar in the top-right of the dashboard → Profile
2. Find the Security notifications card
3. Toggle Email me on sign-in

Notifications are on by default — we think a small amount of email is worth the security signal. Turn them off anytime.

Adding a secondary email

You can add a second email to also receive security notifications — useful if:

• You want a partner or assistant to get the same alerts
• You want a backup inbox in case your primary email is ever compromised
• You want alerts delivered to a personal address separate from your work email

The secondary email is additive — notifications always go to your primary email, and if you set a verified secondary, they go there too.

1. On the Security notifications card, enter the email in the Also send to field
2. Click Add — we send a verification link to that address
3. Click the link in that email to confirm — the address shows a green Verified badge

Until you verify, the secondary address doesn't receive notifications. This is deliberate — it closes a subtle hijack path where someone with temporary account access could add their own email and start silently receiving your sign-in alerts.

Changing or removing the secondary email

• Change it by clicking Remove and then adding a new address. The verified status resets and we send a fresh verification link.
• Remove it with the Remove button — notifications stop going to that address immediately.

Any outstanding verify links for a removed or changed address stop working right away.

What the sign-in notification looks like

The email includes:

• A timestamp (Pacific Time)
• The IP address the sign-in came from
• A summary of the browser/device (user agent string)
• A link to review recent activity
• A link to contact support if it wasn't you

What if it wasn't me?

If you receive a sign-in notification you didn't trigger:

1. Click review recent activity in the email → takes you to your profile page
2. Contact support immediately — we can help you lock the account down