Solutions
Depth where it matters, without the rollout.
Custom roles, configurable workflows and an audit trail that answers the questions an internal auditor actually asks.
What this looks like in practice
Permissions you define
Per-module, per-action control rather than a fixed set of job titles.
Accountability
Every create, edit and delete recorded with the person and the time.
Data isolation
Row-level separation between companies, enforced in the database.
Export whenever
Your data leaves as easily as it arrives.