Although our customers use a shared cloud-based infrastructure when using our cloud products, we have taken measures to ensure they are logically separated so that one customer's actions cannot compromise the data or services of other customers. To achieve logical isolation of our customers, we employ a process we call "Strong Tenant Isolation." This concept ensures that:
Each customer's data is logically separated from the data of other tenants when it resides on any data persistence infrastructure, including databases, file storage, or queues.
Each customer's data is encrypted with a customer-specific key (see the question on encryption/key management).
All requests processed by legal-i have a tenant-specific view of the data, so other tenants are not affected.
Each request includes a tenant identifier authorized for the requested user and tenant setting.