Keep work beside the house
Separate identities, named access, least privilege, and a same-day way to close every work door.
When it fitsAbout 45 minutesThe family can run companies without making family accounts company infrastructure.
Private house
Family identity, health, school, memories, personal money, and private rooms.
Company
Work email, files, staff, customers, finance, and managed devices.
Holding
Ownership, legal, domains, banking, recovery, and very few administrators.
6 steps
| Role | Family | Company | Holding |
|---|---|---|---|
| Partner at home | As agreed | Only if they work there | Only if legally needed |
| Child | Age-appropriate | None | None |
| Staff / contractor | None | Named group with expiry | None |
| Accountant / lawyer | None | Only the records required | Read or advise as required |
- Microsoft 365 Business PremiumEntra ID, Intune, Defender for Business, and company email on your domain.(opens in a new tab)
- Google WorkspaceBusiness identity, Drive, Meet, and admin — keep it off the family Gmail.(opens in a new tab)
- 1Password BusinessThe company vault. Groups for each brand, travel mode, and admin recovery.(opens in a new tab)
- ShopifyThe shop tenant. Staff accounts, not a shared founder login.(opens in a new tab)
- StripeCards and payouts. Two-person access. Hardware keys on.(opens in a new tab)
Some links may be affiliate links. If you subscribe through one, we may earn a commission. A tool is listed because it has a clear job in the floorplan, not because a commission makes it necessary.