Data Isolation
Authdog implements a hierarchical 4-layer isolation model to organize and secure your resources. From top to bottom, the layers are:
- Organization
- Tenant
- Project
- Environment
This structure provides flexible resource isolation while enabling efficient management across different scales of your infrastructure.
Organization
An Organization represents the top-level container in the Authdog hierarchy. It serves as the parent entity for all Tenants.
Key Characteristics
- Billing is applied at the Organization level
- All Tenants within an Organization inherit the subscription plan and billing settings
- Organizations provide the highest level of resource and access control
Tenant
A Tenant is a logical grouping within an Organization that contains one or more Projects.
Key Characteristics
- Teams and access controls are scoped at the Tenant level
- Each Tenant can have its own team configuration and access policies
- Tenants enable multi-team or multi-customer isolation within a single Organization
Project
A Project represents a distinct application or service within your infrastructure, such as:
- Web applications
- Mobile applications
- Backend services
- Scheduled jobs
- Agents or microservices
Key Characteristics
- Each Project can contain multiple Environments
- Projects provide logical separation between different applications or services
- Configuration and resources are organized at the Project level
Environment
An Environment is an isolated instance within a Project, typically corresponding to different stages of your development lifecycle.
Key Characteristics
- Each Environment maintains separate configuration, data, and resources
- Common environment types include development, staging, and production
- Environments enable safe testing and gradual rollout of changes
Typical Workflow
Development → Staging → Production
You typically prototype and test features in a development environment before promoting them to staging for validation, and finally deploying to your production environment.