A non-profit organization decides to use an accounting software solution designed for non-profits. The solution is hosted on a commercial provider's site but the accounting information suchas the general ledger is stored at the non-profit organization's network. Access to the software application is done through an interface that uses a coneventional web browser. The solution is being used by many other non-profit. Which security structure is likely to be in place: