What can a client see in my workspace?
Only the projects, notes and tasks you share with them or that they're part of, plus their own invoices. This is enforced by the database with row-level security, not just hidden in the app, so a client can't open another client's invoice.