Portal access is restricted to founders and approved staff.
After signup, a founder must grant the founder role before vault content becomes visible.