Multi-Tenancy

Multi-tenancy is a cloud architecture where multiple customers (tenants) share the same infrastructure, platforms, or applications while keeping their data logically separated. Most cloud services — SaaS, IaaS, and PaaS — use multi-tenant architectures to achieve economies of scale.

The security concern with multi-tenancy is ensuring proper isolation between tenants. If the cloud provider's isolation mechanisms fail, one tenant might be able to access another tenant's data. For CUI, you need assurance that the cloud provider's tenant isolation is strong enough to meet CMMC requirements.

Why It Matters

When evaluating cloud services for CUI workloads, understanding the provider's multi-tenancy model and tenant isolation mechanisms is important. FedRAMP authorization provides assurance that these isolation controls have been independently assessed.