{"id":"tenant-organization-management","slug":"tenant-organization-management","title":"Tenant and Organization Management","description":"A state police agency shares a platform with thirty county sheriffs and two federal task forces. Each agency has its own data, its own users, and its own compliance obligations. Some share specific case files; none shoul","category":"management","tags":["management","ai","real-time","compliance","blockchain"],"lastModified":"2026-02-23","source_ref":"content/modules/tenant-organization-management.md","url":"/developers/tenant-organization-management","htmlPath":"/developers/tenant-organization-management","jsonPath":"/api/docs/modules/tenant-organization-management","markdownPath":"/api/docs/modules/tenant-organization-management?format=markdown","checksum":"de294e79f073400817ed5d92e2af086d31b2f38f6cf982bfa4cab343e25d3c1b","headings":[{"id":"overview","text":"Overview","level":2},{"id":"key-features","text":"Key Features","level":2},{"id":"multi-tenant-isolation","text":"Multi-Tenant Isolation","level":3},{"id":"hierarchical-organisation-structure","text":"Hierarchical Organisation Structure","level":3},{"id":"resource-quotas-and-allocation","text":"Resource Quotas and Allocation","level":3},{"id":"cross-tenant-collaboration","text":"Cross-Tenant Collaboration","level":3},{"id":"tenant-analytics-and-reporting","text":"Tenant Analytics and Reporting","level":3},{"id":"tenant-lifecycle-management","text":"Tenant Lifecycle Management","level":3},{"id":"deployment-models","text":"Deployment Models","level":3},{"id":"use-cases","text":"Use Cases","level":2},{"id":"integration","text":"Integration","level":2}],"markdown":"# Tenant and Organization Management\n\n## Overview\n\nA state police agency shares a platform with thirty county sheriffs and two federal task forces. Each agency has its own data, its own users, and its own compliance obligations. Some share specific case files; none should see each other's unshared records. At the same time, the platform administrator needs to provision a new county sheriff's office in under an hour, not a week of manual database configuration.\n\nTenant and Organization Management handles all of this through strict multi-tenant isolation, hierarchical organisation structures, and dynamic resource allocation. Multi-agency law enforcement platforms, SaaS providers, and government shared services depend on these controls to maintain complete data sovereignty while enabling cross-tenant collaboration when explicitly authorised. All data is stored in PostgreSQL with `organization_id` enforced on every query, and encryption keys are unique per tenant.\n\n```mermaid\nflowchart TD\n    subgraph Platform [Argus Platform]\n        A[Platform Admin\\nTenant Provisioning]\n        A --> T1[Tenant: State Police]\n        A --> T2[Tenant: County Sheriff A]\n        A --> T3[Tenant: Federal Task Force]\n        T1 --> O1[Org: HQ]\n        T1 --> O2[Org: Region North]\n        T1 --> O3[Org: Region South]\n        T2 --> O4[Org: Sheriff Main]\n        T3 --> O5[Org: Task Force Unit]\n    end\n    subgraph Isolation [Data Isolation]\n        I1[Unique Encryption Keys\\nper Tenant]\n        I2[organization_id\\non All Queries]\n        I3[COI Channels\\nfor Controlled Sharing]\n    end\n    T1 & T2 & T3 --> I1 & I2\n    O2 & O4 --> I3\n```\n\n## Key Features\n\n### Multi-Tenant Isolation\n\nComplete logical and cryptographic separation between tenants ensures data security and regulatory compliance. Each tenant has unique encryption keys, so data at rest is inaccessible across tenant boundaries. Optional dedicated infrastructure is available for regulated environments that require physical isolation in addition to logical separation.\n\n### Hierarchical Organisation Structure\n\nBuild complex organisational hierarchies that mirror real-world structures, from global enterprises to local field offices. Parent-child relationships support unlimited depth with automatic permission inheritance from parent to child organisations, reducing administrative overhead when managing large agency networks.\n\n### Resource Quotas and Allocation\n\nDynamically allocate and manage resources across organisations with real-time monitoring and automated enforcement. User licence counts, compute allocation for AI workloads, and API call budgets are all configurable per tenant with alerting when usage approaches defined limits.\n\n### Cross-Tenant Collaboration\n\nSecurely share data and collaborate across tenant boundaries through explicit COI channels and sharing agreements. Joint investigations allow multiple agencies to collaborate on shared cases while each agency's unshared data remains invisible to the other. Every cross-tenant access event is logged to the audit trail.\n\n### Tenant Analytics and Reporting\n\nVisibility into tenant health, usage patterns, and operational metrics gives platform administrators an accurate picture of the estate. Daily and monthly active user counts, feature adoption rates, and resource utilisation inform capacity planning and support billing accuracy.\n\n### Tenant Lifecycle Management\n\nAutomated onboarding with approval workflows reduces time-to-productive from days to hours. Configuration templates for common deployment scenarios (law enforcement, intelligence, government services) ensure new tenants start with appropriate defaults rather than blank slates. Decommissioning workflows handle data retention obligations before accounts are closed.\n\n### Deployment Models\n\n**Cloud-Hosted (Recommended)**: Fully managed on global infrastructure with automatic updates and security patches. Zero maintenance required from the customer organisation.\n\n**Dedicated Infrastructure**: Isolated worker instances with a custom subdomain (for example, `agency.argus.knogin.com`). Suitable for organisations with strict data residency or network isolation requirements.\n\n## Use Cases\n\n- Multi-agency law enforcement platforms with strict inter-agency data boundaries\n- State and regional intelligence fusion centres requiring controlled cross-tenant sharing\n- Federal shared services across departments with independent billing and quota management\n- International coalition operations using COI channels for classified information exchange\n- County-level government with multiple departments each requiring separate data isolation\n\n## Integration\n\n- Automated monthly invoice generation per organisation with government-compatible procurement workflows\n- Budget management with alerting on overruns and shared-services cost recovery models\n- Compute auto-scaling for AI and ML workloads tied to tenant resource quotas\n- PostgreSQL as the primary data store with `organization_id` scoped on all queries across all 153 platform integrations\n\n**Last Reviewed:** 2026-02-23\n**Last Updated:** 2026-04-14\n"}