Basics
Tenant isolation
Every API key is bound to a tenant. Row-Level Security guarantees full data separation – over the API too.
#Key = tenant
An API key belongs firmly to one tenant. All calls with this key see only that tenant's data.
#Row-Level Security
The separation is enforced at the database level by Row-Level Security – not just in application logic. That makes data overlap between tenants technically impossible.
Note
The same isolation applies in the web app: tenants share the platform, never the data.
Was this helpful?
Suggest an edit