Reference
The mechanics, in detail
How isolation, rule inheritance and the release record actually work. Written for somebody checking this against a questionnaire rather than deciding whether to buy it.
How do you know one client cannot see another?
Tenant isolation →
Who can change a rule, and in which direction?
Rule inheritance →
What is written down when something goes out?
The release record →
Security and data residency are on trust and security. The agreements are in legal.