Multi-tenancy is a product promise: customers expect isolation, not just shared infrastructure.
Isolation models
Row-level tenancy is efficient; schema or database-per-tenant raises isolation at higher cost.
Cross-tenant bugs
Treat missing tenant filters as P0 security defects. Automated tests should catch them.
Noisy neighbors
Quota and rate-limit per tenant. One heavy customer should not degrade everyone else.