Can we control who has access to sensitive documents?

Yes, role-based access controls let you set granular permissions by department, seniority, or location.