Will you have access to sensitive business or customer data?
Only what's necessary for the specific project, and only with your permission. Access is scoped to the task — for example, catalog cleanup only requires product data, not customer or payment information.