Skip to content
Tenvara is coming soon. Get early access
Beta

Documentation

Customer documentation and credentials, where the work happens

Per-customer documentation and a credentials vault that live with the customer, plus your own internal knowledge base. The device page shows its docs and credentials, and a ticket suggests the articles that fit.

Get early access Read the guide
Customer documentation with structured records

Structured records

Templates for network, Wi-Fi, Microsoft 365, applications, vendors, backup and site access.

Credentials vault

Encrypted at rest, revealed on click, with a full audit of who viewed what.

Internal knowledge base

Folders, tags, version history and review dates for your own processes.

Rotation and autofill

Passwords rotated on a schedule, and a browser extension for Chrome, Edge, Firefox and Safari with settings you can set and lock for your team.

A vault your auditors will like

Passwords, TOTP seeds and licence keys are encrypted at rest and only shown on click. Every reveal is recorded with who, what and when, and access follows roles. Some secrets arrive by themselves: BitLocker recovery keys from the agent, and the passwords, PINs and porting codes a customer types into one of your forms.

  • Live TOTP codes
  • Role-based access
  • Every reveal audited
  • A break-glass export that needs a second admin
The credentials vault with an audit trail

Documentation that keeps itself current

Records fill in and stay up to date from Microsoft 365, backup and network discovery, without overwriting what a person wrote. Draw diagrams, map IP ranges, lay out racks with photos, link records together and see the map, with one Diagrams list across every customer. Active Directory snapshots show what changed, and expiring certificates, warranties and licences land in one digest.

  • Diagrams, IP address management and rack layouts
  • Customer folders with their own access
  • A public knowledge base on your own domain

An address for every sign-up

Give each customer email addresses for vendor sign-ups, on your own accounts domain or through Microsoft 365. Their mail lands on the customer's Accounts tab, never as a ticket: codes, sign-in links, password resets, invoices and renewals are recognised, vendor accounts are offered as credentials and renewals as reminders. Codes are revealed like passwords, and every view is logged.

  • Mail shown in a sealed frame, with attachments scanned
  • Automation rules for sign-up mail
  • An optional Sign-up mail page in the customer's portal

Passwords that look after themselves

Rotate local and directory admin passwords on a schedule, with privileged access checked out and back in. Customers' staff reset their own Entra ID or Active Directory passwords, keep their own passwords in a customer password manager, and every password in the vault is checked against known breaches.

  • Password rotation and privileged access
  • Self-service password reset
  • Dark web monitoring for your customers' domains

In the Tenvara app

The password you need, on site

Articles, records and the credentials vault are in the Tenvara app too. Reveals need Face ID or a fingerprint, are recorded in the vault audit log, and secrets are never saved on the phone.

  • Knowledge base articles and customer records
  • Passwords and live two-factor codes after a biometric check
  • Every reveal and copy in the audit log
See the Tenvara app iPhone, iPad and Android, for beta customers
A credential revealed in the Tenvara app with its live two-factor code
Searching customers, tickets, alerts and contacts in the Tenvara app

In the knowledge base

See exactly how it works

Sign-up addresses for customers Give each customer email addresses for vendor sign-ups whose mail lands on the customer, never as a ticket, received on your own accounts domain or through Microsoft 365. Sign-up mail: codes, links and renewals Read the mail to a customer's sign-up addresses on the Accounts tab, what Tenvara recognises in it, revealing a code, vendor accounts as credentials, renewal reminders, and rules for sign-up mail. Browser extension settings and policy The settings in the browser extension (saving and updating passwords, the inline menu, fill on page load, matching, generated passwords, locking and the clipboard), the policy that sets and locks them for your team and for a customer's people, and what "Set by your organisation" means. Diagrams, IP addresses and racks Draw network and floor plan diagrams linked to real devices, keep each customer's subnets and who has which address, lay out racks, and keep photos of the comms cupboard with the customer's documentation. Records kept up to date and Active Directory snapshots Let Tenvara fill Microsoft 365, backup, network, application and Active Directory records from what it already knows, get suggestions for applications to document, and compare a customer's Active Directory between any two days. Folders, sharing and history File each customer's documentation in folders, limit who sees a folder, share read-only links with people outside, show records on the portal, print or download PDFs, and see every earlier version of records and credentials. Public knowledge base Publish chosen knowledge base articles as a help centre anyone can read without signing in, on your own domain, in your branding and found by search engines. Password rotation and privileged access Rotate local administrator passwords on every device into the vault, keep privileged Active Directory accounts rotated, and sign in to devices with a vault credential you never see. The browser extension Fill customers' usernames, passwords and two-factor codes into websites from the vault, save new sign-ins, use generated passwords, and set the extension's defaults and locks for your team. The password manager for your customers Give your customers' staff personal and shared password vaults in the portal, encrypted in their browser, and see a vault only when its owner shares it with you. Self-service password reset Let your customers' staff reset a forgotten Microsoft 365 or Active Directory password, or unlock their account, from the portal after proving who they are with a code. Dark web monitoring Watch your customers' domains and addresses in breach data, check vault passwords against known breaches, work exposures, and send each customer a report. Vault break-glass export Keep an encrypted copy of the credentials vault that opens without Tenvara, approved by a second administrator, with scheduled exports and an offline viewer. BitLocker recovery keys How Tenvara collects the recovery key of every BitLocker volume into the credentials vault, however BitLocker was turned on, and where to find, add and reveal them. Importing from IT Glue and Hudu Bring your documentation, passwords, contacts and devices across from an IT Glue export file or from Hudu, keeping your folders or choosing where articles go, or keep syncing from IT Glue or Hudu with a connector that asks what to bring across, per kind and per company.

Read the guide

Step by step instructions for Documentation, with screenshots, in the knowledge base.

Open the guide

Next area

Automation and AI

When X, do Y rules, on-call paging, wall screens and AI with your own key.

Keep exploring

Tenvara is coming soon.

We're inviting MSPs to the beta in small groups. Apply to join, or get launch updates by email and hear first when pricing is announced.

Get early access Get updates