Branded auth and domains

Branded sign-in for Invited Apps

An Invited-audience App shows visitors a sign-in screen you can brand — this is content only, not authentication logic; the underlying auth is still Cheqq's. Configure:

• Headline and subhead text
• Logo — falls back to your workspace's brand kit logo if you don't set one specifically for the App
• Allow self sign-up — whether new visitors can create their own access, or only people you've explicitly invited can sign in
• Custom CSS for further styling

Your workspace's brand kit (logo, colors, fonts) feeds into this screen as the default look, and is also used as context for the App Builder when it generates pages — set it once at the workspace level and every App can draw from it.

Visitor roles

Signed-in App visitors get one of three roles: owner (you, the author), member, or guest. Which roles are allowed depends on the App's audience — a Team App only admits workspace members, while an Invited App can admit guests you've specifically added.

Sessions

An App visitor's sign-in session lasts 7 days. If you're previewing your own unpublished App changes, you get a separate, short-lived 5-minute preview session instead — long enough to check a change without leaving a long-lived session open on a draft.

Custom domains

Every App gets a working *.cheqq.site address the moment it's published. On a Business-plan workspace, you can point a custom domain at it instead:

1. Open the App's Domain button and enter your domain (e.g. www.example.com).
2. Add the verification record Cheqq shows you.
3. Add the routing CNAME record.
4. Status updates automatically as DNS propagates — no need to re-check manually.

Your generated *.cheqq.site address keeps working even after a custom domain is connected, so it's always available as a fallback.

For the click-through, see Manage an App.