MINIMUM NECESSARY ACCESS
We request access appropriate to the agreed task—not unlimited control of your financial life.
SECURITY & CONFIDENTIALITY · PRACTICAL CONTROL
Access to the work.
Not control of your money.
Financial support requires trust. We make that trust easier to evaluate by explaining how access, credentials, approvals, and offboarding should work.
See the safeguards ↓The right access.
The smallest necessary scope.
A clear owner.
Where platforms support it, read-only or role-based access is preferred. Exact permissions depend on the service and are agreed before work begins.
FOUR SAFEGUARDS
Confidence comes from
knowing how access works.
APPROVED ACCESS METHODS
Platform invitations, accountant access, and role-based permissions are preferred over sharing primary credentials.
YOUR APPROVAL REMAINS CENTRAL
Sensitive actions and approval authority remain subject to the responsibilities defined in your engagement.
NAMED HUMAN ACCOUNTABILITY
A defined team, confidentiality obligations, and clear escalation routes keep responsibility visible.
THE ACCESS LIFECYCLE
Visible from request
to removal.
SCOPE
Define the work and the systems involved.
REQUEST
Ask for the permissions needed for that scope.
APPROVE
You approve the access method and responsible users.
WORK
The team performs and reviews the agreed work.
REMOVE
Access is changed or removed when the scope ends.
PLEASE DO
Use approved invitations and permission settings.
Share information through the channels agreed for your engagement and review access periodically.
PLEASE DO NOT
Send primary banking passwords through email or documents.
If a credential is ever required, agree on an appropriate secure method before sharing it.
QUESTIONS ABOUT A SPECIFIC WORKFLOW?