@sauloperez the agent responsible for customers data here is the hub, so making customers data visible for the supplier is not a question of GDPR for me as it is necessary for the realization of the service. We are not using customers data for any purpose that is not delivering the service that the customer asked for. The hub needs to be able to give a new permission to each producer to tell if they can or not see customers details, that’s the only thing I would implement, a new “hub2producer” permission.