Tenant Data Isolation
This topic describes how your data is isolated from other Uniphore customer's data and the prevention processes in place to avoid unauthorized data access, for more information see Unauthorized Data Access Prevention.
By default, on Administration Platform , tenants share physical resources such as CPUs, GPUs, memory, and network bandwidth. Despite this shared environment, robust mechanisms ensure complete logical isolation of tenant data.
Each tenant’s access to the platform is governed through JWT (JSON Web Token) access tokens, which are used end-to-end across all platform services. These tokens are issued by a trusted identity provider, Okta Auth0, and include critical information such as the tenant identifier, user details, roles, and permissions. This data is used to enforce strict data partitioning, ensuring that a tenant can only access their own data.
The JWT tokens are validated and inspected centrally by the API Gateway ingress controller, which is implemented using Kong. The gateway serves as a critical enforcement point, verifying the authenticity and integrity of each token before granting access to any platform service. This ensures that only authorized requests, which carry the correct tenant-specific claims, can access the appropriate data and resources. This centralized control prevents unauthorized access and ensures that any cross-tenant data leakage is impossible, maintaining strict data isolation at all times.
