As of now the ebills notification goes to everyone that has access to the client rather than the user that setup the vendor. The e-mail contains sensitive information.