Access is by invitation: your administrator creates your account; sign-in binds to it. Aval stores no passwords.