Who can access customer data?

Access is role-based. Vendor access is not provided by default and is limited to authorized personnel when support requires it and the customer authorizes access.