What is the 90-day inactivity policy?

As part of our ISO 27001 certification and ongoing commitment to data security, SDM has introduced a 90-day inactivity policy for access credentials. 

We periodically review access and automatically disable credentials that have not been used within 90 days. This is a standard security control that reduces the risk of unauthorised access from forgotten or abandoned accounts.

Which access types does this affect?

The policy applies to:

• SFTP accounts — connections used to transfer files programmatically
• API access — tokens used to integrate with the SDM platform
• Admin panel access — back-office user accounts (for partners and internal use only).

I received multiple notifications. Did something go wrong?

The notifications are legitimate — they reflect a real inactivity check now running on the platform. However, we identified a technical issue that caused some customers to receive duplicate copies of the same notification. We apologise for the confusion this caused.

Is there anything I need to do?

For most customers, no action is required. If you log in to the SDM web platform regularly, your account remains fully active.

My SFTP access is expiring — what should I do?

You're receiving this warning because you haven't connected to the SDM SFTP server in over 83 days. If you don't connect within the next 7 days, your SFTP access will be automatically disabled. To keep your access, simply log in to the SFTP server before the deadline. Any successful connection resets the timer — you don't need to upload a file. 

If your access has already been disabled, you won't be able to reconnect on your own. Contact your organization administrator and ask them to re-enable your SFTP access — they can do this from the admin panel.

I have lost access. What should I do?

Your organisation admin or SDM partner can review and restore your credentials directly. If the issue persists or you need further assistance, reach contact Akeneo Support team.