Overview
User Validation ensures that only authorized users retain access to project content.
When a user—internal or external—is added to a project, they are granted access for 90 days.
If their access is not revalidated before this period ends, they are automatically removed from the project.
IMPORTANT: User validation is mandatory and cannot be disabled.
If you receive an Account Validity Warning email from noreply@alluvial.app, it is a legitimate notification.
Extending Access

Project owners and project administrators with sufficient priviledges are responsible for managing user access. Access can be extended in two ways:
- Via Project Administration – Approve extension requests by clicking Extend Validity.
- Via User Administration – Extend access proactively without a user-initiated request.


NOTE: The Extend Validity option is only available when a user is nearing the end of their access period. If you do not see it, the user still has sufficient time remaining.
Revoking Access
To revoke a user’s access, you can:
- Allow their current validity period to expire.
- Delete the user from the project entirely.

Summary
User Validation is a security safeguard ensuring that only actively authorized users can access project content.
Project administrators must review and update access periodically to maintain compliance and data protection.