Private data
Isolated per tenant
Inventory, purchase costs, supplier terms, customer records, margins. This layer belongs entirely to the company that produced it. It is not pooled, not sold, and not visible to us in aggregate. Every query against it is scoped to a single tenant at the database level, not by a filter someone could forget to apply.
- Row-level tenant isolation
- No cross-tenant reads
- Customer owns and can export