How to evaluate Zuora security: permissions, audit logs, and data controls?

To evaluate Zuora security, check that it has strong role-based permissions (finance, ops, read-only), detailed audit logs for billing, config, and user changes, and clear data controls like encryption, access restrictions, data retention, and export limits, basically make sure every sensitive action is permissioned, logged, and reviewable for compliance and audits.