Tenant isolation
Strict separation so one customer's data and agents can never reach another's.
category ▸ Agents & Identity
Tenant isolation, in plain language.
Tenant isolation is the guarantee that, in a multi-tenant system, each customer's data, identities, and activity are walled off from every other customer's. No query, agent, or action belonging to one tenant can read or affect another, even by mistake.
For regulated buyers, isolation is non-negotiable: it is the foundation of confidentiality and the precondition for any compliance claim. Isolation that is enforced structurally — built into every data access — is far stronger than isolation that depends on application code remembering to filter.
How Cortex implements it.
This term isn't abstract here — it maps to a real capability in the runtime. Here is exactly how Cortex enforces or relates to it.
Cortex keys data on (tenantId, id) throughout, so tenant scope is part of every lookup rather than an afterthought. Agent identities, ontology objects, policies, ledger records, and budgets are all tenant-scoped, and cross-tenant transfer only happens out-of-band via a signed pack artifact — never a direct cross-tenant write.
For the strictest deployments, an air-gapped or single-tenant VPC install runs the full runtime with local models, so data never leaves the customer's perimeter at all.
Keep building the vocabulary.
These terms sit next to this one in the governed-AI model — follow the thread to see how the controls connect.
Agent IAM
Identity and access management that treats each AI agent as a governed enterprise identity.
RBAC
Role-based access control — permissions granted by role rather than to individuals.
DLP
Data loss prevention — screening data in and out of tool calls to catch leakage and injection.
Solution Pack
A versioned, signed bundle of a governed solution you can verify and re-deploy.
See Tenant isolation enforced, not just defined.
Book a walkthrough and watch the controls in this glossary return real verdicts, seal real evidence, and trace every fact back to its source.