How is customer data isolated in a multi-tenant environment? 

Each customer operates in a logically isolated tenant context. Data, configuration, vector stores, and secrets are tenant-isolated. Cross-tenant access is technically and logically prevented.