> ## Documentation Index
> Fetch the complete documentation index at: https://docs.pharussecurity.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Companies

> Belong to several companies with one account, switch between them, start a new one and keep each company's settings up to date.

<Info>
  **Plans:** Every plan, and Free. **Who:** anyone can belong to several companies. Owners and admins change the company settings.
</Info>

In Pharus a company is a workspace: its product families, SBOMs, incidents, filings, disclosure reports, members and settings. Every record belongs to exactly one company, and nothing is shared between companies. One account can belong to as many companies as you are invited to, for example a group and its subsidiaries, or a consultant working for several clients.

## What is set per company

* **Your role.** You can be an owner in one company and a member in another. See [Members and roles](/workspace/members-and-roles).
* **Your profile.** Title, mobile number, language and notification choices are set under **Settings → Your profile** in each company. A number verified in one company has to be verified again in another before you are paged there.
* **The plan.** Each company has its own trial and its own subscription. See [Billing](/workspace/billing).

Your name, email address, password and two-step verification belong to your account and are the same everywhere.

## Switch company

The company you're working in is named at the top of the sidebar. Select it to open **Your companies**, then pick another company. Pharus opens its overview.

When you sign in, Pharus opens the company you joined most recently. If a link leads to "Page not found", the record may belong to another company: switch company in the sidebar and open the link again.

## Start a new company

<Steps>
  <Step title="Open the company menu">
    Select the company name at the top of the sidebar, then **New company**.
  </Step>

  <Step title="Fill in the company steps">
    The same **Company**, **Routing** and **Pipeline** steps as at sign-up, including accepting the terms for the new company. See [Set up your company](/workspace/sign-up#set-up-your-company). **Cancel** takes you back.
  </Step>
</Steps>

You are the owner of the new company, and it gets its own 14-day free trial.

<Note>
  You can have one unpaid trial at a time. While a company you own is on its free trial, or its trial has ended without a subscription, Pharus asks you to subscribe to it under **Settings → Billing** before you start another. Being an admin or member of other companies doesn't count.
</Note>

## Company settings

Open **Settings → Company**. Owners and admins can change it; members see it read-only. Select **Save company settings** when you're done. Changes are recorded in the [audit trail](/reports/audit-trail).

### Company details

| Field | What it is for |
| - | - |
| **Company name** | Shown on reports, invitations and the security contact. Renaming doesn't change the address of your [disclosure page](/disclosure/disclosure-page). |
| **Main establishment** | An EU or EEA country, or **Outside the EU and the EEA**. It decides the reporting route and which VAT field you see. |
| **Organisation number** | Nine digits from Brønnøysundregistrene. Required for a company in Norway, optional elsewhere. |
| **Default language** | Norwegian (bokmål) or English. For invitations and for members who haven't picked a language. |
| **Security contact email** | Where vulnerability reports and CSIRT follow-ups go. |
| **Company size** | Micro, small, or medium-sized or larger, by EU Recommendation 2003/361/EC. For a micro or small enterprise, the incident clocks note what CRA Art. 64(10) says about the 24-hour early warning. See [Clocks](/incidents/clocks). |

### Default reporting route

Under CRA Art. 14(7) the first link in the EU decides which CSIRT receives your reports. A company established in an EU member state reports to the CSIRT there. A company in Norway or outside the EU sets the member state of each link: authorised representative in the EU, importer, distributor, member state with most users. Product families inherit this route unless they set their own. See [Art. 14(7) routing](/incidents/routing).

### Invoice details

| Field | What it is for |
| - | - |
| **Invoice email** | Each invoice from Pharus is sent here as a PDF, for example to your accounting system's inbox. |
| **Registered in the Norwegian VAT Register** | Norway only. Tick it, and invoices show the organisation number followed by MVA. |
| **VAT number** | Other EU and EEA countries. Optional, shown on invoices from Pharus. |
| **Tax ID** | Outside the EU and the EEA. Invoices show the tax ID you give at checkout; contact Pharus to change it. |

See [Billing](/workspace/billing#vat-number-and-invoice-email).

### Also on this page

* **Plan**: what the company has now, with a link to **Settings → Billing**.
* **Ready to file in ENISA's SRP**: who in the company can file in the Single Reporting Platform with EU Login. See [SRP paste pack](/incidents/srp-pack).
* **Export workspace data** and **Close workspace**. See [Data and deletion](/workspace/data-and-deletion).

When the workspace is on Free, owners and admins can still change the company details, the route and the invoice details. In a closed workspace they can't be changed until an owner reopens it.

## Workspace ID

Each company has a workspace ID. Find it under **Settings → Billing**, with a copy button, and include it when you contact Pharus about billing.

## Leave a company

You can't remove yourself from a company. Ask an owner or admin to remove you under **Settings → Members**. If you're the only owner, make someone else an owner first. Deleting your account takes you out of every company at once: see [Data and deletion](/workspace/data-and-deletion#delete-your-account).

## Related

<CardGroup cols={2}>
  <Card title="Members and roles" icon="users" href="/workspace/members-and-roles" />

  <Card title="Billing" icon="credit-card" href="/workspace/billing" />

  <Card title="Art. 14(7) routing" icon="route" href="/incidents/routing" />

  <Card title="Data and deletion" icon="database" href="/workspace/data-and-deletion" />
</CardGroup>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.