Architecture
Multi-Tenancy & RLS

Multi-Tenancy

Xilos supports multi-tenant isolation, ensuring each organization's data is completely separate from all others.

Organization Isolation

  • Each organization has its own set of routing rules, restriction rules, workflows, and query history
  • Users in one organization cannot access data from another organization
  • Data isolation is enforced at the database level, not just at the application level
  • All queries are automatically scoped to the authenticated user's organization

What This Means for Users

  • Your query history, routing rules, and security policies are private to your organization
  • No data leaks between organizations, even on shared infrastructure
  • Each organization can have its own model configuration, compliance settings, and data residency rules
  • SuperAdmins manage their own organization's settings independently

Info: For Private Cloud and On-Premise deployments, isolation is further enhanced by running on dedicated infrastructure.

Departments

Within an organization, users can be grouped into departments for:

  • Department-level cost tracking in Cost Controls
  • Department-level query filtering in the Query Log
  • Department-level budget limits via Virtual Keys