Since this is a "shared base" service, are there any controls in place if a client requests some kind of confidentiality?