Organization-specific words that replace Wingspan's default labels in the app. Each label is stored on this account; a null label removes it, and an account set to inherit settings from a parent account then shows the parent's label.

Organization help links shown in the app in place of Wingspan's. Links must start with http:// or https://. A null link removes it, and an account set to inherit settings from a parent account then shows the parent's link.

Theme for Wingspan-hosted and embedded app surfaces. Values are CSS values; values that could load or run content (for example url(, expression(, <) are rejected. The token groups accept the token names the app's theme defines.

Organization settings per requirement type, shown when a client sets up a requirement. Each setting is stored on this account; a null setting removes it, and an account set to inherit settings from a parent account then gets the parent's setting.

Font choices for Wingspan-hosted and embedded surfaces. Each role inherits a complete descriptor from parent Accounts; descriptor fields are never combined across Accounts. Fonts override the corresponding appearance defaults; explicit button, input and select family overrides still apply. Omitted roles retain their saved values and an empty object changes nothing. Font loading does not block startup; unavailable fonts use the fallback stack. These font resources are not loaded in transactional email.

Organization-wide CSS customization for Wingspan-hosted and embedded surfaces. CSS is applied after the standard Wingspan theme tokens and is not used for transactional email rendering.

Per-direction email delivery configuration. Defaults to WingspanManaged everywhere. Three directions: - ar — invoices, charge receipts, dispute notifications, retry notices. - ap — payable notifications, payout receipts, tax-form delivery. - transactional (a.k.a. operational) — security alerts, MFA
challenges, login notifications. Security-relevant emails default
to WingspanManaged regardless of brand mode and are not delegable.

Per-jurisdiction currency allow-lists at onboarding. Drives the choices presented in embedded onboarding and is enforced server-side at POST /v3/finance/external-bank-accounts. Default (when currencyPolicy is unset): all currencies allowed everywhere — backwards-compatible behaviour. When set, the policy is exhaustive: countries not listed retain default behaviour; countries listed permit only the named currencies. Inheritance: child accounts inherit the parent's policy until they set their own.

Retry-policy customization per direction. ar controls retries for failed AR charges; ap controls retries for failed disbursements.

Security-related customization. Default values are secure-by-default; the entries listed here are caller overrides for organizations with documented security exceptions.