Where does the data live, and who can see it?

“Deployment boundaries are scoped per engagement. The systems we build enforce tenant, fund, client, and investor access below the interface, with access denied by default. We document the data flow and hosting model before any production record moves.”