What access the agent needs
- Access is limited to what one agreed workflow requires — typically a mailbox or shared folder where the documents arrive, and read access to the records used for checking.
- Write access is only requested where the workflow genuinely needs it, for example filing a document or updating a record. [CONFIRM: the exact systems and permission levels you request for a standard engagement.]
- Credentials are never shared between clients.