Organization isolation
01Security

Organization isolation

Isolation should be structural, not optional.

01

When multiple organizations share the same platform, isolation has to be designed into the product from the beginning. Meld is built so each organization operates in its own context, with separate branding, configuration, and access boundaries.

If you're evaluating platforms for your organization, you've probably heard the term "multi-tenant" before. Most SaaS platforms are multi-tenant — meaning multiple customers share the same infrastructure. That's fine, and it's how modern software works. The question is how that sharing is managed, and what happens when something goes wrong.

In many platforms, tenant isolation is enforced by application logic — code that filters data based on who's logged in. That works until it doesn't. A single bug, a missed filter, an edge case nobody tested — and suddenly one organization can see another's data. These aren't theoretical risks. They're the kind of incidents that end up in the news.

Meld takes a different approach. Isolation is enforced at the infrastructure level, before your data is ever touched. Every request is scoped to a specific organization before any query runs. There is no code path — no URL, no API call, no admin action — that can access data across organizational boundaries. It's not a rule the software follows. It's a constraint the architecture enforces.

Isolation should be enforced by architecture, not left to convention.

Circuit board with gold traces

Organization isolation

What does this mean in practice? It means your member data, your billing configuration, your branding, your custom fields, your integrations — all of it exists in a completely separate context. Changes one organization makes can never affect another. An admin in Organization A can never accidentally — or intentionally — see data from Organization B.

This extends to everything: the subscriber portal your members see is fully branded to your organization. Your email templates, your subscription plans, your SFTP connections, your webhook configurations — they're all yours and only yours. Meld feels like your own product because, from a data perspective, it is.

We also verify this isolation continuously. Every release goes through automated testing that specifically checks for cross-tenant data access. If any path were to exist — even theoretically — it would be caught before it reaches production. This isn't just good engineering. It's the kind of assurance your board, your compliance team, and your members deserve.