id: small-saas/policy/tenant-isolation
kind: policy
title: Tenant Isolation Policy
profile: small-saas
scope: service-and-data-plane
statement: Tenant requests, namespaces, access grants, and data partitions must not cross tenant boundaries.
control_ids:
  - small-saas/control/namespace-per-tenant
evidence_ids:
  - small-saas/evidence/access-review-2026-05
relationships:
  - type: requires
    target: small-saas/control/namespace-per-tenant
  - type: evidenced_by
    target: small-saas/evidence/access-review-2026-05