Database-enforced tenant boundary
Tenant-scoped financial tables use Postgres row-level security with FORCE, so the database applies workspace isolation to the application role.
Data isolation
Tenant isolation is enforced in Postgres with FORCE row-level security. This page states implemented technical controls only.
Tenant-scoped financial tables use Postgres row-level security with FORCE, so the database applies workspace isolation to the application role.
Financial mutations write audit events, and database triggers reject updates or deletes to those audit records.
Database isolation and the append-only audit trail are implemented technical controls. Support-access and contractual commitments remain subject to written policy and legal review.