Skip to content

Platform & multi-tenancy

The platform is multi-tenant: many organizations share infrastructure with strict data isolation.

Capabilities

Control vs data plane

A control-plane database holds minimal cross-org data (org registry, slug, domains, limits, LLM policy, invites). A shared data-plane database holds product data scoped by org_id.

Shared multitenant data

Product data lives in one logical database with rows scoped by org_id and row-level security enforcing tenant isolation.

Tenant host routing & domains

The tenant is resolved from the exact request host against control-plane org domains, with a development host-suffix fallback.

Organization lifecycle

Organizations are created via a request-and-approval flow, receive a unique slug and domain, and can be soft-deleted.

Last updated 2026-07-04