Tenant separation

All data and services should, by default, be separated by tenant to maintain data security and integrity across the platform.

Implementation Strategy:

• Multi-Tenant Architecture: When feasible, use a multi-tenant architecture where all tenants share the same application instance and database infrastructure. Tenant data must still be logically separated to prevent unauthorized cross-tenant access. Ensure that each tenant’s data is accessible and modifiable only within its authorized scope.

• Defining Tenants:

  • In most cases, a “tenant” refers to the company or organization that uses the application.

  • In certain use cases, a “tenant” may instead represent an individual user or a group of users within the application.