Multi-Tenancy Architecture - Victoria AI OS Documentation

3-Layer Isolation

Victoria AI OS implements defense-in-depth with three layers of tenant isolation:

Layer 1: Subdomain

Each firm gets a unique subdomain (e.g., smith-law.divorce.law) that serves as the first layer of isolation.

Layer 2: Database RLS

PostgreSQL Row Level Security (RLS) with 100+ enforcement rules ensures no firm can access another’s data at the database level.

Layer 3: Application

API and Edge Function-level access checks provide an additional layer of security.

This architecture means even in the unlikely event of an application bug, database RLS prevents cross-firm data access.