Who can see your pack
A company in snapdue can have several people attached to it, and they do not all need the same access. There are four roles, and the difference between them is deliberate rather than cosmetic.
The four roles
Owner. Full access, including managing who else has access.
Admin. Everything an owner can do except outranking an owner.
Member. Sees the company and the public register record, and no part of the due diligence pack.
Viewer. Reads the pack and changes nothing. This is the role for a buyer or an adviser who needs to read what you have prepared.
Inviting somebody
You invite by email address. The invitation needs no token and it cannot expire, because the person is attached to the company the moment you invite them and the account attaches itself the first time that address signs in.
An invitation cannot name the owner role. Ownership is not something that can be handed out from an invitation form.
What nobody can do
Nobody can change their own access, and nobody can remove their own access. That closes the obvious way to escalate.
Changing somebody else needs your role to outrank theirs, so an admin cannot alter an owner.
Claiming a company raises a member to an owner or an admin, and it never raises a viewer. A viewer is somebody reading a pack rather than somebody controlling a company, and that distinction survives the claim.
Every one of these is refused by the action itself rather than merely hidden in the form.
Sensitive sections
Some fields never leave the server for a reader without edit access. Identity records are blocked entirely, and named fields covering payroll, bank account numbers, loan details and litigation detail are removed before the page is built.
A read only role opening a section that is blocked entirely gets a not found page rather than an empty one, because an empty page still confirms the section exists.