Platform, vendor and customer each secured what they controlled. The token that crossed all three belonged operationally to nobody.