The Walled Garden Architecture

WorkMA uses a schema-per-tenant isolation model. Each workspace has its own PostgreSQL schema, ensuring that data is physically separated at the database level.

How It Works

• When you create a workspace, a dedicated PostgreSQL schema is provisioned.
• All tenant data (tasks, teams, meetings, support tickets) lives in that schema.
• Database queries are automatically routed to the correct schema based on the subdomain.
• No cross-tenant data access is possible — even a database compromise exposes only one tenant.

What's Shared

• User accounts: Your login works across all tenants you belong to.
• Billing: Subscription data is in the public schema.
• Notifications: Cross-tenant notifications for platform updates.

What's Isolated

• Tasks, teams, meetings, support tickets, code projects, files, merge requests, and all workspace data.

This architecture provides SOC 2–level data isolation without the complexity of separate database instances.