J805
3
As @code-escapee said, yes, privacy rules are the most important part. 
Remember to add the ‘company’ onto each data type that you create for your users as well. Then make sure to setup privacy rules on those. Otherwise, they will potentially see everyone’s data.
Just something else to keep in mind.
Maybe @code-escapee already kind of alluded to that.
2 Likes