How we keep your data private, in plain terms

What it means when we say your data is isolated by default, and why it changes how checkout and access work.

Data isolation means your organization's records live behind a boundary that no other customer can cross. Access is scoped to your organization, and checkout activates modules only for your account.

In practice, this is why an owner account drives subscription activation: the boundary needs a clear owner. It is also why role checks happen before checkout, not after.