Multi-Tenancy Architecture Selector

Design multi-tenancy for {{PRODUCT}}: {{tenant sizes, count, data isolation requirements, compliance/certifications, on-prem demand, expected growth, ops team size}}. Compare the three classic models (pool/shared schema with tenant_id, bridge/schema per tenant, silo/database per tenant) and hybrid tiers across: data isolation strength, blast radius, noisy-neighbor risk, per-tenant backup/restore, migration across tiers, operational automation required, cost at 10 / 1k / 50k tenants, and compliance story (SOC2/ISO/HIPAA/GDPR data deletion). Deliver the chosen model with: - schema patterns (tenant_id placement, composite PKs, RLS where supported), enforced at every layer including background jobs and analytics. - connection-per-tenant pooling strategy, cache key namespacing, and rate/quota enforcement points. - tenant provisioning, suspension, export, and hard-delete flows (incl. backups/ search indexes/object storage cleanup). - end-to-end tests proving cross-tenant isolation (negative tests on every API, queue, and cache), and migration playbooks between tiers. ================================================================================