Tenant accounts and access
An organization, its users and its records need an explicit relationship. Tenant boundaries should follow the data into jobs, exports and administrative actions. We design the access model with you and test paths where an account could otherwise see or change the wrong records.