Tenant isolation

Keep each company boundary clear.

Accounting data benefits from stronger tenant boundaries than ordinary workflow data, especially for export, restore, support, and compliance needs.

Control plane

Shared tenant services can manage identity and plans.

Workspaces

Memberships

Plans

Usage

Support

Billing

Ledger data should be easy to isolate for larger customers.

Schema per tenant

Database per tenant

Tenant exports

Tenant restores

Backups

Region choice

All reads and writes need tenant-scoped enforcement.

Scoped queries

RLS-ready tables

Admin audit

Support scopes

API scopes

Object prefixes