Isolation between the two sides
- Buyers and providers sign in separately, and each side acts only for itself.
- Provider sign-in details stay on the provider side, and browser sessions carry only buyer access.
- A prompt arrives as data and stays data on the provider machine.