Pax works inside the access you grant, logs every action, and can reverse it. The Trust Center documents data handling.