Restricted platform — authorized program users only. All activity is recorded in an immutable audit log.