Tenant isolation
3 min read · Updated June 2026
Isolation is not a feature toggle in ThatApp — it is how the system is built. Every organization is walled off from every other one.
How isolation is enforced
- Own database per org. Each organization's data lives in its own database.
- Two layers. Cross-tenant access is blocked at both the application and database layers.
- Scoped credentials. Connected-platform credentials are encrypted at rest and scoped to the workspace.
AVA inherits the wall. Because she is locked to one organization per conversation, the same boundary that isolates your data also isolates her reasoning.