Account Types in xperise

xperise supports two types of accounts: a Personal Account and a Corporate Account. Every user begins with a Personal Account. A Personal Account becomes a Corporate Account when it gains active membership in a business.

1. Personal Account

A Personal Account is any authenticated identity in xperise that is not currently linked to an active business. It is the base identity layer for every user in the system.

Attributes

Information	Description
Full name	The display name of the account holder.
Email address	Used to log in and receive notifications. At least one of email or phone number is required. Each email address can only belong to one account.
Phone number	Vietnam phone numbers only. Can be used instead of or alongside an email address. Each number can only belong to one account.
Password	Set when the user chooses password-based login. Not required for users who log in with Google.
Account status	Whether the account is active, locked, or deactivated.
Email verification status	Whether the email address has been verified. Unverified addresses cannot be used for security-sensitive actions.
Phone verification status	Whether the phone number has been verified. Unverified numbers cannot be used for security-sensitive actions.
Login method	The ways the account can authenticate: password, OTP, or Google.

A Personal Account supports login by password, OTP, or Google. See Login Flow for step-by-step instructions on each method, OTP delivery channels, password reset, and password rules.

What a Personal Account Can Do

Log in and access the platform.
Create a new business (becoming a Corporate Account upon success).
Receive and accept a business invitation (also becoming a Corporate Account).
Exist independently without joining any business.

2. Corporate Account

A Corporate Account is a Personal Account that holds an active membership in a business. The account identity itself does not change — the Corporate Account is the combination of the underlying Personal Account and its active Business Membership record.

Business Membership Attributes

When an account joins a business, a membership record is created that holds the following information:

Information	Description
Account	The user this membership belongs to.
Business	The business this user is a member of.
Role	The user's role within the business: Admin, Accountant, or Normal User.
Department	The department the user belongs to within the business. Optional.
Membership status	Whether the membership is currently active or has been deactivated.
Date joined	When the membership became active.
Date removed	When the membership was deactivated, if applicable.

Business Roles

Role	Who it is	What they can do
Admin	Business administrator	Manage business profile, departments, users, roles, and security settings.
Accountant	Accountant	Performs accounting-related work. No administrative rights.
Normal User	Standard team member	Uses the platform within the assigned business. No administrative permissions.

Business Attributes

Every business that a Corporate Account belongs to has the following information:

Information	Description
Tax code	A unique code that identifies the business. No two businesses can share the same tax code.
Full name	The legal name of the business.
Short name	The display name shown across the platform in day-to-day screens.
Business status	Whether the business is currently active, suspended, or removed.
Mandatory two-step verification	Whether all members must complete an extra verification step after logging in. Off by default.

Additional Security: Business-Level Two-Step Verification

When a business turns on mandatory two-step verification, every Corporate Account must confirm their identity a second time after logging in — regardless of whether they used a password or Google. The verification code can be sent to a verified email address, a verified Vietnam phone number, or a linked Zalo account.

3. Relationship Between Account Types

┌────────────────────────────────┐
│         Personal Account        │
│                                  │
│  Full name                       │
│  Email address                   │
│  Phone number                    │
│  Password                        │
│  Account status                  │
│  Login method                    │
└───────────────┬──────────────────┘
                │
                │ may have 0 or 1 active membership
                │
                ▼
┌────────────────────────────────┐
│       Business Membership       │
│  (makes it a Corporate Account) │
│                                  │
│  Role (Admin / Accountant /      │
│        Normal User)              │
│  Department (optional)           │
│  Membership status               │
└───────────────┬──────────────────┘
                │
                │ belongs to 1 Business
                │
                ▼
┌────────────────────────────────┐
│            Business             │
│                                  │
│  Tax code (unique)               │
│  Full name / Short name          │
│  Business status                 │
│  Two-step verification setting   │
└────────────────────────────────┘

Key Rules

Rule	Description
One business at a time	An account can belong to at most one active business at any given time.
One role per membership	A user has exactly one role within their business.
One department per user	A user can be assigned to at most one department within their business.
Creator becomes Admin	When an account creates a business, it automatically becomes the first Admin.
Account remains after leaving	When a membership is removed, the personal account is preserved and the user may join or create another business.
Two-step verification cannot be skipped	A Corporate Account using Google login must still complete two-step verification when the business requires it.

State Transition Summary

Personal Account (no business)
        │
        ├─── Creates a business ──────────────► Corporate Account (ADMIN)
        │
        └─── Accepts a business invitation ──► Corporate Account (ADMIN / ACCOUNTANT / NORMAL_USER)

Corporate Account
        │
        └─── Membership deactivated ─────────► Personal Account (no active business)

4. Quick Comparison

	Personal Account	Corporate Account
Business membership	None	Active membership in one business
Role	None	Admin, Accountant, or Normal User
Department	None	Optional (one per membership)
Can create a business	Yes	No (already in a business)
Subject to two-step verification	No	Yes, when the business enables it
Can receive a business invitation	Yes	No
What it is	A standalone account	A personal account with an active business membership

1. Personal Account​

Attributes​

Login Methods​

What a Personal Account Can Do​

2. Corporate Account​

Business Membership Attributes​

Business Roles​

Business Attributes​

Additional Security: Business-Level Two-Step Verification​

3. Relationship Between Account Types​

Key Rules​

State Transition Summary​

4. Quick Comparison​