Restricted to authorised staff. Every action taken on a client account is written to the audit log.
Encrypted session. Sign-in attempts and client account operations are traced.