Is a single-tenant deployment safer?

It removes a class of risk and adds operational cost and slower updates. For many companies a well-isolated shared platform with contractual guarantees is the better trade.

What is easiest to miss in an AI platform?

The vector index, response caches and persisted memory. They are newer than the database, and they are where cross-tenant leakage has historically appeared.

Tenant Isolation

Tenant isolation is the guarantee that one customer’s data and compute cannot reach another’s inside a platform that serves many customers at once.

Almost every business platform is multi-tenant, because dedicated infrastructure per customer is expensive and slow to operate. Isolation is what makes that acceptable: every query is scoped to a tenant, every stored object is attributed to one, and nothing shared between tenants carries their content.

AI adds surfaces the older model did not have. A retrieval index, a cache of model responses and any persisted memory are all places where one tenant’s content could surface for another if the scoping is missed. Those are the components worth asking about specifically, because the database is usually the part that was designed correctly from the start.

Frequently Asked Questions

It means it shares infrastructure. Whether it is properly separated is the isolation question, and it should be enforced on every read rather than trusted to application code remembering.