Intrusive Investment Provider Forms

A TPA client was told by an investment provider that in order for the provider to reveal information about mutual clients they have to be an authorized TPA and in order to do so they have to complete a form that the TPA deems intrusive because it asks about their book of business, revenue, insurance policies etc. etc.

How do other TPA firms deal with this - do you simply provide the requested information?  Thanks.

There are some out there that do not want to work with every TPA. Particularly if the investment provider's service model grants TPAs a lot of access/ control over the plan once they are set up in their system as one.

Just as some wealth advisors have minimum investment requirements ($5 million, $10 million etc). If the TPA is large enough, I have seen some basic information given, certainly information about the TPAs insurance, data protection policies etc. It is reasonable for the TPA to also ask how their information is protected and who it is shared with before anything is disclosed on the form so the TPA can decide if it is worth it or not. 

Being a named TPA might just be one option. Is there an option to be noted as an authorized party for the retirement plan? More like a plan contact in general the similar to how a bookkeeper, payroll company, or CPA for the employer would be granted access? Just so they can get copies of statements?