Dual-authority onboarding and access — individual accounts, split identity and data custody, zero shared credentials.