Tenant separation

Every organization is strictly separated from all others in the database; the database itself checks every access.

IT & data protectionExecutive management

Purpose

One company's knowledge must never turn up at another. For this, Universe Memory does not rely on the interface, but has the database check every single row.

How it works

Every organization gets its own ID; every row in every table carries this ID.
On every read and write, the database checks whether the signed-in person is a member of the organization and which role they have.
If the permission is missing, the database delivers no data, even if a page were to request it.
Downloads such as “Download as BPMN” and “Download as PowerPoint” are subject to the same check.

RightsIllustration

Entire companyDepartmentRestrictedSales looks for HR data✕ No accessVisible to the department

Microphone only after your click
Four-eyes principle
Data in Frankfurt am Main
Every approval in the log

Fig. 1 The three visibility scopes: the database does not deliver a restricted entry of another department; a department entry is seen by the department's members.

Row-level security on every table

Row-level security of the database is switched on for organizations, memberships, departments, invitations, knowledge, knowledge questions, processes, situation reports, drafts and the log. Each table has its own rules on who may read, create and change.

Secure creation and joining

Creating an organization and becoming its owner happen in a single step in the database.
Before joining, an invitation checks the ID, the validity and the email address of the signed-in account.
The choice of the active organization only accepts organizations the person belongs to.

Session and forwarding

The sign-in only applies to the Universe Memory area. After signing in, Universe Memory only forwards to pages of its own workspace, never to other addresses. The workspace pages are blocked for search engines.

Tips

Check the separation yourself with two accounts in two organizations: neither sees the other's knowledge, questions, processes or situation reports.

Frequently asked questions

Can a member of one organization see data of another?

No. The database only delivers rows of organizations the person belongs to, and there only what their role allows.

Where is the separation enforced?

In the database itself, for every table and every access, not only in the interface.

Related features

Who sees which knowledgeStatus, visibility scope, department and role together decide who may read a knowledge entry.Roles and rightsFive roles: owner, administration, executive management, head of department and employee, each with clearly defined rights.Switch organizationAnyone who belongs to several organizations chooses under “Switch organization” in the overview which one to work in.Data locationThe cloud version of Universe Memory runs in Frankfurt am Main; speech recognition and the first language model process in the EU.

As of: 23/10/2026 · Concept & lead: Alexander Holtermann