Tenant isolation
Customer data is isolated using Row-Level Security (RLS) enforced at the database layer. Each tenant’s data is scoped at the database level, so tenant boundaries hold regardless of how the application is called — they are not application-dependent. Every record is scoped to three identifiers — tenant, workspace, and user. In the graph database, every node also carriestenant_id, workspace_id, and user_id, and
queries must filter by at least tenant_id.
RLS policy definitions are available on request as part of the IT & CISO Deployment
Package.
Access controls
Access to customer session data is restricted to Enfors engineering on-call personnel only. No other Enfors staff — including leadership — have standing access to production customer data.Identity & authentication
See SSO and MCP overview.