Access is shared logins, and the guest-facing brand is whatever the last person uploaded.

Each organization manages members and permissions. Brands carry the look of a location's guest flow. The audit log records who changed what. Internal staff can work across tenants; a tenant stays on its own organization.

The people who can refund, cite, or change a rate should be named, and the change should be on the record.

Team and brands wrap every other module. The guest sees the brand. The operator sees who did the work.