Tenant isolation

Cyber Health Score is designed so each organisation's workspace data stays separate. Access is enforced on the server using your signed-in session and workspace membership.

Core principles

• Each organisation has its own workspace.
• Users belong to a workspace through membership with a defined role.
• Operational data is scoped to the active workspace.
• Services evaluate your session and role before returning or changing data.

Role and support boundaries

Ordinary workspace work uses your membership role (Owner, Admin, Analyst, or Viewer).

Support access is separate from membership. When you grant support access, you define scoped, time-limited access that you can revoke. Support visibility does not make support staff full workspace members.

Assistant boundaries

The workspace assistant uses approved glossary and workspace-scoped context. It is not a global bot with access to other organisations' data.

Expected result

You can explain to stakeholders that Cyber Health Score treats workspace isolation as a server-enforced design requirement, not only a user interface convention.

Related documentation

• Support access controls
• MFA and authentication