Architecture
Multi-Tenancy Model
How EasyFlow keeps every company's data completely isolated — and what that means for you.
What is a tenant?
In EasyFlow, a tenant is one company's private workspace. Every tenant has its own team, its own workflows, its own ERP connections, and its own data. Nothing is shared between tenants.
If you are a 3PL provider running operations for 10 different clients, each client is a separate tenant. You — as the super admin — can see and manage all 10. Each client's team can only see their own workspace.
Isolation guarantees
| What is isolated | How |
|---|---|
| Users | Every user belongs to exactly one tenant (or is a platform-level super admin) |
| Workflows | Workflow definitions and execution history are scoped to a tenant_id |
| ERP connections | Connector configs (API keys, URLs) are stored per-tenant and never shared |
| Webhook tokens | Each tenant has its own HMAC token — tokens from other tenants are rejected |
| Dashboard data | All API queries include tenant_id filtering at the database level |
| Audit logs | Audit entries are tagged with tenant_id and cannot be cross-queried |
⚠Super admins can view all tenants but still cannot read another tenant's ERP credentials. Connector configs are stored encrypted per tenant.
The role hierarchy
| Role | Scope | Can do |
|---|---|---|
| Super Admin | Platform-wide | Create/manage all tenants, view all dashboards, manage platform settings |
| Tenant Admin | Their tenant only | Manage users, workflows, and ERP connections within their workspace |
| Manager | Their tenant only | Approve requests, view all dashboards, run workflows |
| Analyst | Their tenant only | View dashboards, export reports. No write access. |
| Operator | Their tenant only | Run assigned workflow steps. See only their work. |
Cross-tenant operations
Super admins can perform cross-tenant operations from the Admin Portal. These include:
- Creating a new tenant workspace (company, plan, modules, initial admin)
- Suspending or activating a tenant
- Viewing aggregate platform metrics across all tenants
- Resetting the platform-wide role permission matrix
- Enabling maintenance mode (locks all tenant access)
All cross-tenant actions are logged in the platform audit trail with the super admin's ID, timestamp, and affected tenant.