Isolation modelHow it works Isolation strength Cost efficiency Audit & compliance story Best fit
Shared database, shared schema One schema for every tenant; rows tagged with a discriminator like carrier_id Weakest; enforced only in application code Highest density, lowest cost Hard to prove; one bad query can expose another carrier Early-stage MVPs and non-regulated data
Shared database, schema-per-tenant Each carrier gets its own schema inside one shared database Strong structural separation between tenants Pools infrastructure, moderate cost Clean "prove it" story, with per-tenant backups and access The long tail of carriers on a regulated platform
Database-per-tenant Each carrier runs on its own dedicated database Strongest, with full physical separation Lowest density, highest operating cost Easiest to certify; isolated patching and recovery Largest or most heavily regulated carriers