What is workspace isolation, and how does it protect business data in Polyosync?
Workspace isolation is the principle of keeping business information, operational resources, and access permissions separated between different authorized business environments.
Polyosync supports multiple business organizations and workspaces. Each business environment must operate within the boundaries established by its membership, configuration, and authorization rules.
Why is workspace isolation important?
Businesses may store sensitive information such as customer records, business knowledge, internal conversations, AI Employee configurations, automation instructions, and operational results.
Information belonging to one business must not become available to an unrelated business simply because both organizations use the same software platform.
What does workspace isolation cover?
The relevant boundaries may include:
1. Business profiles and organizational information.
2. Users and workspace membership.
3. AI Employees and their assigned configurations.
4. Business knowledge and instructions.
5. Automation and workflow resources.
6. Business processes and execution results.
7. AI collaboration activities.
8. Connected integrations and their credentials.
9. Customer and lead information.
10. Operational history and reports.
The precise controls depend on the relevant feature and implemented authorization rules.
How does workspace isolation differ from user permissions?
Workspace isolation establishes which business environment a resource belongs to.
User permissions determine which operations an authorized member can perform within that environment.
A user may be authenticated successfully but still lack permission to access a particular workspace or resource.
Can one business view another business's information?
An unrelated business should not be able to access another organization's protected resources through ordinary platform functionality.
Such access would contradict the intended workspace isolation model.
What about AI Employees?
AI Employees are associated with configured business environments and responsibilities.
Their operations should remain subject to the same relevant workspace and authorization boundaries.
An AI Employee should not be able to retrieve another customer's information simply because it receives an instruction requesting that information.
Does workspace isolation mean every business has a separate physical database?
Not necessarily.
Logical tenant isolation and dedicated physical infrastructure are different architectural approaches.
Workspace isolation does not, by itself, imply that every customer receives a separate database, server, or cloud environment.
What should I do if I suspect an isolation problem?
Do not attempt to explore or retrieve additional unauthorized information.
Record the relevant workspace, action, time, and any non-sensitive evidence.
Contact Polyosync Support promptly so the situation can be investigated as a potential security incident.
Summary
Workspace isolation is a fundamental part of protecting customer information in a multi-business platform.
The objective is to ensure that each organization operates within its authorized environment without exposing its resources to unrelated businesses.