{"enrichment":{"faq":[{"a":"Multitenant provides three isolation tiers to segregate customer data: shared schema (lowest cost, highest risk), dedicated schema per tenant (moderate isolation), and dedicated database per tenant (strongest isolation). Each tier includes automatic tenant_id filtering in SQL queries and PostgreSQL Row-Level Security to prevent cross-tenant data leaks. Choose your tier based on compliance requirements and cost constraints.","q":"How do I isolate customer data safely in a multitenant application?"},{"a":"Multitenant supports three approaches: shared schema stores all tenants in one table with tenant_id filtering; dedicated schema isolates each tenant's tables within one database; dedicated database gives each tenant their own PostgreSQL instance. Shared schema minimizes costs but requires strict filtering discipline. Dedicated databases offer maximum isolation for regulated industries but increase operational overhead.","q":"What's the difference between shared schema vs dedicated database tenants?"},{"a":"Multitenant prevents data leaks through automatic tenant_id filtering on every query, PostgreSQL Row-Level Security policies, and field-level encryption for PII. The framework enforces tenant context propagation across async jobs, middleware, and caching layers (Redis prefixing). Built-in anti-pattern detection catches common mistakes like missing WHERE clauses or unfiltered cache keys.","q":"How does Multitenant prevent cross-tenant data leaks?"},{"a":"Yes. Multitenant supports both Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) patterns within each tenant's isolation tier. Field-level encryption protects sensitive data like PII at the column level, independent of your chosen isolation strategy. Combine these with Row-Level Security for defense-in-depth security.","q":"Can Multitenant implement RBAC and field-level encryption for tenants?"},{"a":"Multitenant supports zero-downtime tier migration: move tenants from shared schema to dedicated schema, or from dedicated schema to dedicated database. The framework handles tenant context propagation during migration, maintains data consistency, and allows gradual rollout by tenant cohort rather than all-at-once cutover.","q":"How do I migrate tenants between isolation tiers without downtime?"},{"a":"Multitenant documentation highlights critical anti-patterns: forgetting tenant_id in WHERE clauses, caching without tenant prefixes, not propagating tenant context in async jobs, and mixing isolation tiers without clear governance. These mistakes cause cross-tenant data leaks. Use Multitenant's built-in guards and testing utilities (Pest integration) to catch violations early.","q":"What multitenant anti-patterns should I avoid?"}],"shadow_tags":["data-isolation","saas-architecture","tenant-context","compliance-ready","cost-tiering","security-hardening","scaling-strategy","encryption-patterns","zero-trust-design"],"summary_rewrite":"Build multitenant applications with three isolation tiers\u2014from cost-effective shared schema to enterprise-grade dedicated databases\u2014each with automatic tenant filtering and PostgreSQL Row-Level Security. Covers RBAC/ABAC patterns, field-level encryption for sensitive data, and critical anti-patterns to avoid cross-tenant data leaks."},"files":[{"bytes":3110,"path":".claude/skills/multitenant/SKILL.md","sha256":"ea9374537bdad00489db0c8faa261655acb7707402402e7f032055f3b494eeb7","url":"https://skillfed.io/files/TheBeardedBearSAS/claude-craft/multitenant/c963a562/SKILL.md"}],"id":"TheBeardedBearSAS/claude-craft/multitenant","links":{"html":"https://skillfed.io/TheBeardedBearSAS/claude-craft/multitenant","md":"https://skillfed.io/TheBeardedBearSAS/claude-craft/multitenant.md","repo":"https://github.com/TheBeardedBearSAS/claude-craft"},"meta":{"agents_supported":["claude-code"],"first_seen":"2026-07-28","forks":9,"language":"Shell","last_updated":"2026-07-27","license":"MIT","name":"Multitenant","publisher":"TheBeardedBearSAS","stars":99},"relations":{"similar":[{"id":"lawve-ai/awesome-legal-skills/recherche-theses-allison-fiorentino"},{"id":"lawve-ai/awesome-legal-skills/audit-de-conformite-rgpd-site-internet-hugo-salard"},{"id":"lawve-ai/awesome-legal-skills/requete-cph-licenciement-faute-grave-selim-brihi"},{"id":"lawve-ai/awesome-legal-skills/doctrinal-research-allison-fiorentino"},{"id":"TheBeardedBearSAS/claude-craft/socratic-brainstorm"},{"id":"lawve-ai/awesome-legal-skills/mandarinat-christophe-quezel-ambrunaz"},{"id":"lawve-ai/awesome-legal-skills/analyse-rgpd-dpa-fournisseur-hugo-salard"},{"id":"lawve-ai/awesome-legal-skills/legal-assistant-christophe-quezel-ambrunaz"},{"id":"lawve-ai/awesome-legal-skills/sanctions-screening-gillan-saleh"},{"id":"TheBeardedBearSAS/claude-craft/dynamic-workflows"}]},"slug":{"owner":"TheBeardedBearSAS","repo":"claude-craft","skill":"multitenant"},"version":"c963a562"}