Scoped
The systems in the audit, not the whole company.
Access
The audit is read-only on purpose. A person who can edit your TMS should not be the person checking your fuel.
I can see purchases, locations, dispatch assignments, and, when a line needs it, a safety clip you grant. I cannot change a load, a card limit, a driver record, or a duty status.
Keys stay in your accounts. I keep working copies only for the engagement and delete them within 30 days after we stop, unless you ask to keep a finding pack.
I use careful habits from healthcare work. This service does not hold a SOC 2 report or a HIPAA certification. I will not decorate the audit with a badge I do not have.
I do not train public models on your fleet data. The work product is yours.
What I look for
The systems in the audit, not the whole company.
Created in your account, visible to your admin.
You can pull it without asking me first.
Short answers
No. If a vendor only offers admin, tell me. We will find a narrower path or stop.
Working copies live only as long as the engagement. The privacy page states the 30-day rule.
Next step
On the call I will list the systems. You decide what a read looks like in each one.