Defined term / workflow

Tenant

The isolation unit owning a workspace's data, secrets, and approvals.

Definition

Every typed record carries an org id, a tenant id, and a classification. The runtime resolves tenant context from the request and refuses cross-tenant reads or writes at every storage boundary.

Related doc

Multi-Tenancy

Org / tenant isolation, admin actions, review workflows, and BYOK encryption for regulated workloads.

Open doc