Access is granted by the owner — never by sign-up alone.

A new account sees no records. Staff, customers and investors each enter only their own area, using a separate invite code issued by the owner.