For outsourced accounting firms
One workspace per client group. Staff see only the clients they are assigned to; a client can be given read access to their own workspace for the review step. Mappings, tolerance rules and templates are per workspace, so one client's conventions never leak into another's.
For group finance teams
One workspace per group, entities inside it. Roles: preparer, reviewer, auditor (read-only, time-boxed). SSO on Group and Enterprise plans.
Data
Documents and extracted data are stored in your region on Google Cloud, encrypted at rest, retained for the period you set and deleted on demand. Nothing is used to train models. The full policy set is published once on the company site and applies here.
Metering transparency
Every RU is logged with a request id, the document or item it relates to, and a timestamp, in the workspace before it is reported to Google Cloud for billing. You can export the ledger and reconcile it against your invoice — which, given what the product does, seemed only fair.