Access limited to what the work needs, read-only wherever possible, removed when you leave. Every change logged. Budgets, payments and credentials stay yours.