Data Protection & Multi-Tenant Architecture

1. Multi-Tenant Data Architecture Ruhanir ERP is built on a shared-infrastructure, tenant-partitioned database architecture. Rather than running separate servers for each organization, records are organized with strict tenant scoping.

2. Access Scoping Principles - Operational tables include a dedicated `tenant_id` column identifying the owning organization. - API requests and database queries require an authenticated session token. - Portal user roles (such as staff, teachers, administrators) constrain data operations within that specific tenant. - Public read access is restricted to intended public catalog items (such as published menus, active course lists, or public intake forms).

3. Data Transit & Backup Protocols - All traffic between client browsers and our platform is encrypted in transit using TLS 1.3. - Automated snapshot backups are conducted daily and retained in secure cloud object storage.

4. Tenant Data Portability Tenants retain complete ownership of their organizational records. Upon written request by an authorized account owner, structured exports (CSV or JSON) are provided for data migration or archiving.