Tenancy modes
Shared, dedicated, and self-hosted isolation — how they differ and when to use each.
Tenelix offers three levels of data isolation, so a clinic can start cost-effectively and move to stronger isolation as its compliance needs grow. The product and its features are identical across all three — only where the data lives changes.
| Isolation level | What it means | Best for |
|---|---|---|
| Shared | Tenants share a database, isolated at the row level so no tenant can reach another's data | Cost-effective SaaS, small and mid-size clinics |
| Dedicated | The tenant gets its own database — the database itself is the isolation boundary | Large hospitals, strict compliance |
| Self-hosted | The tenant runs on its own infrastructure; no data leaves its network | Data residency, no-internet sites |
Hybrid is the default: a tenant starts shared and graduates to a dedicated database when it needs to, with no change to how the clinic uses the product.
For the engineering detail behind the isolation model, see the Hybrid multi-tenancy blog post.