Security alert e-mails

The system writes an e-mail when access to your firm changes. The mail goes out after the change was saved, never before, and it never contains a password, a sign-in code or an API token.
Your role was changed: you get the mail. It names the firm, your old and your new role, who changed it and when.
You were removed from a firm: you get the mail. It names the firm, who removed you and when. Your API tokens for that firm stop working.
A new member joined (an invitation was accepted): every active Firm owner of the firm gets the mail. It names the new member and the role.
Support access was granted: every active firm owner gets the mail. It names who granted it, the scope (read only) and until when it is valid.
An API token was created: the person who created it and every active firm owner get the mail, once each. It names the token, its tier, its permissions and its expiry date. The token itself is shown only once on screen and never sent by e-mail.
Only members who are active receive these mails. An invited, removed or disabled person gets none, except that a removed person is told about their own removal.
The mail is written in the language set in the recipient's profile. If a mail cannot be sent, the change itself still stands and is recorded in the audit log.
If a mail reports something you did not expect, open Settings, then Members, and change the role or remove the member; for support access or an API token, revoke it in the settings of the firm or client.