Users, groups and permissions per feature and per level of the namespace, on a system that runs inside your own network.
On every edition, including Edge
Grant access at a level of the tree. A contractor commissioning one line gets that line, not the plant.
Rights belong to a role. Someone joining or leaving a shift is a membership change rather than an audit of every screen.
Tokens for machine-to-machine access, scoped like any other account, so an integration is not somebody’s personal login.
Database and device credentials are stored sealed and kept out of error output and exports.

It runs on your infrastructure, inside your network. The question of who holds the data does not arise.
The trial is the full product, with every module unlocked, and it restarts as often as you like. No licence key, no registration.