They seem to have pretty serious access control (Orgs, Teams) and a Policy based access control system.