Permissions are set per document type. A department field limits managers to their own people. Sensitive types can require a reason before they open, and the reason stays in the document's history. This grid is an example; yours will differ.
Scroll sideways on a phone to see every role.
Sign-in your IT team already runs. Active Directory or SAML single sign-on, with authenticator-app codes required for everyone if you choose.
Every look is on the record. Views, downloads, searches and deletions are logged with who and when, so you can answer “who opened this file?”
Names match your HR system. Employee name and department can be looked up from your HR or payroll database by employee ID as each document is filed.