Role-based access, customer isolation, audit history, protected documents and safe application sessions.