OfficePrep is multi-tenant. Every customer record carries its organization identifier and PostgreSQL row-level security enforces that boundary on all 84 customer tables, across the app, the Enterprise API and SCIM. An automated cross-tenant access suite verifies the boundary on every release.