Security and audit

Staff accounts live under Staff. Grant the least role needed. Deactivate accounts the day someone leaves.

The audit log records approvals, edits, and every sensitive-data view. Review it when investigating a dispute.

The email log shows every outbound email and its delivery status. Check it before assuming a family did not get the invoice.

Never share login credentials. Every action is attributed to the signed-in account.