Does this allow a salesman from company A to access customer info from company B (where A and B are both customers of salesforce) or is it just intra-organization?

Still bad if the latter, but catastrophic if the former