Verified Multi-Tenant Isolation
Someone on the call asks whether another agency on this tool could ever see their unpublished post. Everyone turns to look at you.
- Pro included
- Agency included
What It Does
Every table has row rules switched on in Postgres. When you’re signed in, the database itself decides which rows you can see, row by row, whatever the screen asked for.
Reading and writing are checked separately, so a Viewer on your team can’t change anything either.
How It Works
Asked Every Time
A row belongs to one account. Each read and each write is checked against it.
Tried With Two People
Our database tests replay every change on a real Postgres, sign in as two people and a signed-out visitor, and check what each can see and write.
Checked Where the Rules Stop
Nightly jobs, review links, and the free tools run with no one signed in. That connection skips row rules, so each path checks whose work it is first.