Glossary
Tenant Isolation
Tenant isolation is the property that, in a system shared by many separate organizations, one tenant's data, configuration, and load stay separate from every other tenant's — enforced by the platform, not by convention or the good behavior of tenants themselves. A gap in isolation can expose one organization's private data to another, or let one tenant's usage degrade the system for everyone else.
Isolation can be enforced at several layers — separate databases, separate encryption keys per tenant, request-level checks that a resource belongs to the requesting tenant — and the layers are not interchangeable: a system that isolates data storage correctly can still leak information sideways through a shared cache or a shared rate limiter that doesn't account for tenant boundaries.