To be SOX compliant, our company requires dual controls for transferring money from the business PayPal account to the linked bank account. From everything I have researched it appears that a single person using the primary email address and password can log into the system and transfer the funds. We need someone to be the primary owner of the account who cannot also transfer the funds to the linked bank account.
