Authorized firm staff only. Sessions are protected by row-level security.