One proxy, multi-tenant controls, and tamper-proof logs that legal, security, and ops teams all sign off on.