What is multi-tenancy?
Multi-tenancy is an architecture where a single deployment serves many customer organizations, each seeing only its own data. The tenant is the unit of isolation.
The hard part is that isolation must hold everywhere, not mostly. One query missing its tenant filter is a breach, and application-level filtering fails exactly when someone adds a new query in a hurry.
Enforcing isolation below the application — in the database itself — turns "did every developer remember?" into a property of the system.
Tenant isolation is enforced with PostgreSQL row-level security. Every run is bound to one host tenant, and the boundary does not depend on prompt instructions or application code remembering to filter.
Related terms
- Row-level security — A database feature restricting which rows a query can see, enforced by the database rather than the application.
- Trusted issuer — A registered identity provider whose signed assertions a platform is willing to accept.
- Token exchange — Trading a token issued by one system for a scoped token issued by another, so an application can act with narrowed authority.
See it working rather than described.
The product demo runs one agent across three systems and stops at the approval gate.