How this works: nothing flows into the Team Vault unless you switch it on. You authorise each service once (log in / pick the folders or numbers); this console records what's connected and drives the per-client portals. Flip a switch = connected. Personal, financial & internal data stays out.