Multi-tenant by design.
Three tenant models, three isolation layers and three deployment shapes — engineered so every team, from solo to Fortune 500, gets the right boundary.
Strict tenant isolation
Every record, request and asset is scoped to a tenant boundary — enforced end-to-end.
Enterprise scalability
Horizontal scale across regions with per-tenant quotas, routing and observability.
Cost-efficient shared infrastructure
Multi-tenant by default so smaller teams get enterprise reliability at consumer pricing.
Optional dedicated deployments
Isolated databases, networking and inference planes for regulated workloads.
Secure data segregation
Encryption boundaries, key isolation and per-tenant audit trails as a baseline.
One product. Three shapes.
Individual, team and enterprise tenants share one codebase and one experience.
Personal tenant
Single-owner workspaces, knowledge bases and agents — private by default.
Team tenant
Shared workspaces, knowledge and agents with centralised billing and roles.
Enterprise tenant
Multi-department hierarchy with SSO, SCIM, RBAC and compliance controls.
Boundaries at every layer.
Database, storage and application — isolation is enforced, not assumed.
Row Level Security
tenant_id enforced on every record with policy-level access checks and full audit logging.
Tenant buckets
Per-tenant storage buckets, access policies and encryption boundaries.
Runtime isolation
Tenant-aware routing, workspace isolation, session segregation and permission enforcement.
Deploy where you must.
Shared SaaS, dedicated Falcon Cloud or fully private — same product, different perimeter.
Shared SaaS
Multi-tenant infrastructure — the default. Fastest to onboard, lowest cost.
Dedicated environment
Isolated infrastructure, dedicated database and dedicated networking within Falcon Cloud.
Private deployment
Deploy into your VPC or on-prem — customer-owned cloud with Falcon-managed operations.
A tenant is a tree.
Six levels — from organization to individual user — with policy inheritance at every step.