Log in Request Demo

PLATFORM EquinoxFinance, CRM, HR, inventory, projects TalonTickets, chat, knowledge base WebmailEmail, calendar, contacts OspreyHeadless CMS, code-first FlareThe control desk for running several clients’ social profiles: editorial plan, queue, approvals and figures.

SECURITY & IDENTITY VigilanteEDR for Windows endpoints AurisIdentity, access and compliance VanguardSelf-hosted red-team workbench

COMMUNICATIONS & PRODUCTIVITY SigilDocuments, signing & PDF DeltaRemote desktop

MSP & IT PulseCloud RMM for MSPs — remote monitoring & management

COMPUTE HostingDeploy apps from Git on EU infrastructure VPSVirtual private servers

NETWORK & SECURITY DomainsDomain registration & transfer TLSManaged TLS certificates StoreFirewalls, PCs, servers and VoIP phones — stocked and shipped by Altovar

STORAGE & DATABASE Object StorageS3-compatible EU storage Storage BoxFlat-price network drive for the office Managed DatabasesManaged PostgreSQL and MySQL

MESSAGING & EMAIL MailboxesEmail hosting for business domains

GROWTH & INNOVATION MarketingDigital strategy, SEO, campaigns, brand identity & EU-focused content marketing.Artificial IntelligenceAI integration, autonomous agents & intelligent systems for enterprise processes.Machine LearningCustom models, data pipelines & bespoke ML solutions for your industry.

DEVELOPMENT Web DevelopmentWeb applications, SaaS & custom portals — from UI to production deploy.Software DevelopmentCustom software, API integrations, automations & scalable architectures for your business.IT & SystemsOn-site physical infrastructure, Dell PowerEdge servers, maintenance & systems support.

SECURITY & CONSULTING CybersecurityPenetration testing, vulnerability assessment, incident response & NIS2/DORA/GDPR compliance.IT ConsultingTechnology roadmap, infrastructure audit & strategic advisory for CTOs and decision makers.

SPACES & INSTALLATIONS Smart GlassTransparent LED film, switchable privacy glass & insulating glass, supplied and installed.

01Private AIOpen-weight models on your servers or ours, sized from the model up, with a price you can work out yourself.02NIS2 and DORAFrameworks, evidence, audits and the incident clock in one workspace, with access control that leaves a record.03MSPContracts, tickets, licences and remote sessions for the company that looks after other companies' IT.04EnterpriseSingle sign-on, provisioning, roles and an audit trail that reaches your own tools, over ERP, service desk and hosting.05ResearchPDFs opened, annotated and signed on your own machine, S3-compatible storage, and one login for the institution.06Sovereign OfficeMail, calendar, files and PDF signing: Webmail over any mailbox, mailboxes we host, Drive and Sigil.07Managed IT SupportA ticket desk with SLA clocks, remote sessions the user accepts, and the contract kept in the same place.08Sovereign CloudServers, storage and databases in named European regions, ordered and billed monthly.09SEO and GEOThe technical layer, content desk and measurement that run altovar.net, offered as a managed service. All solutions →

TRUST Partner Program Trust & Security Roadmap Press / Media

COMPANY Company Careers News Contacts

LATEST UPDATES 23 Oct 2026PHP2Shell vulnerability: patch PHP today, both RCE flaws already exploited 22 Oct 2026Open Policy Agent for MSPs: admission, API authorization and CI gates

Log in → Request Demo

ARTICLE

5 October 2026 Updated on 23 October 2026 1 min read

Produced by Neska

Org ≠ tenant: the MSP vocabulary that stops wrong isolation

In multi-tenant identity models, a tenant is typically the hard isolation boundary for a customer (directory / control-plane scope). An organization (or similar soft grouping) can nest inside a tenant for teams, brands, or billing units — without becoming a second customer boundary.

In multi-tenant identity models, a tenant is typically the hard isolation boundary for a customer (directory / control-plane scope). An organization (or similar soft grouping) can nest inside a tenant for teams, brands, or billing units — without becoming a second customer boundary.

Facade of a white apartment block with a regular grid of small windows and flowering oleander in front. — Photo: kallerna (CC BY-SA 4.0), Wikimedia Commons.

Org ≠ tenant: the MSP vocabulary that stops wrong isolation

Cite: Microsoft Learn — Multitenant identity considerations; secondary FAQ framing on user vs tenant vs membership.

Users and workloads are not tenants. Access is via membership (and roles) that the application must re-verify — including when a principal belongs to multiple tenants. Collapsing “org” into “customer tenant” in MSP vocabulary is a common source of wrong isolation designs.

One customer → one hard tenant; many soft orgs may live inside.

Soft land: Auris models customer = tenant with soft orgs inside. Sovereign-mode language here means operational posture (isolation + evidence), not a certification seal.