Tenancy models
How the platform isolates one tenant's data from another. Full documentation coming soon.
This page is a placeholder. Platform documentation is being written alongside the release.
The platform enforces tenant isolation at the query boundary. The right model depends on how the client's warehouse is laid out:
- Row-level (RLS) — one shared schema, rows filtered per tenant by a database policy.
- Schema-per-tenant — each tenant's tables live in their own schema.
- Database-per-tenant — full physical separation (also how per-tenant BigQuery datasets work).
Each mode changes how metadata discovery and the fetch path behave, so the platform handles them distinctly. A full guide with configuration examples will land here.