Controlling record access for different companies based on organizations