Regulated companies must show who can open which data, prove it is reviewed, and export the evidence. What the tenant reports give you, and what they do not.
