Share access, without handing over the keys.
Your accountant needs to see the statements. Your family office runs the day to day. Privacy permissions let you invite the people you trust with a role that limits what they can see and what they can do, while the profile stays yours.Invite the people you trust with a role that limits what they can see and do. The profile stays yours.
DigiDoe provides e-money accounts and payment services, not bank accounts, deposit products or investment services. Relevant funds are safeguarded but are not protected by the FSCS. Read the full safeguarding position.
Zero of this page’s twenty-four blocks differ from privacy-permissions.html (business lane). Kept as its own page (Yuval, 2026-08-17), with the gap recorded rather than resolved. The product-review sheet for this page lists three open questions a human must confirm before it carries content distinct from its sibling.
first-layer: duplicate and unfinished content, needs compliance view
Your circle
The people around your money, each at the right distance.who a private client actually invites, vs a finance team's roles, unconfirmed, needs product first-layer: private-client product, terms and regulatory protections, needs compliance view
This kind of money is rarely managed by one person alone. Someone prepares the filings, someone reconciles the statements, someone reviews. None of them needs everything.
Your accountant or tax adviser
Balances and transaction history when they need them, without the ability to move money. No more exporting statements by hand every quarter.export claim unconfirmed
Family-office staff or your assistant
A role scoped to the work they actually do, seeing and doing what their responsibility covers, and nothing beyond it.
An auditor or reviewer
Read-only access for the duration of the engagement. When it ends, so does the access, removed in one administrative step.removal step unconfirmed, whether offboarding differs for individuals, needs product
Role names and permission sets are illustrative; specific capabilities are described within the platform.
How it works
Three steps to invite someone in.
Invite by email
Send an invitation from the platform to the person’s email address and choose their role at that point. They create their own credentials; you never share yours.
The role draws the line
The role you assign sets the boundary, from full visibility down to read-only. Access to your transaction data is limited to the people with a reason to have it.role-granularity claim unconfirmed, no product note; whether permission levels differ by product for individuals, needs product
You stay in control
Only you manage who has access. Change a role when responsibilities change, and remove access the day an engagement ends.
Discretion
Narrower access is safer access.heading derived, replaces an unapproved absolute claim first-layer: confidentiality and discretion positioning, needs compliance view
Seen on a need basis
Transaction records can contain personal data, yours and other people’s. Restricting who can view them is part of handling that data properly, not just a convenience.first-layer: privacy notice and data-processing transparency, needs compliance view
Records the platform keepsheading derived, needs MLRO
Maintain accessible transaction and account-activity records through the DigiDoe platform.
Access that ends on time
People move on; access should too. Reviewing roles now and then, and removing them promptly, keeps yesterday’s arrangement from becoming today’s exposure.
