How organization data isolation works

Vavan is multi-organization, which means many companies use the same platform, but each company's data is strictly isolated in its own organization. Every record — accounts, contacts, orders, files — belongs to exactly one workspace, and access is enforced at the data layer so one customer can never read or write another customer's information.

This isolation is not a convention that apps are trusted to follow; it is enforced underneath every request. Whether data is reached through an app, the assistant, or an integration, the same boundary applies, so there is no path that bypasses it.

Credentials you provide for integrations are stored against your workspace alone and are used only to serve your organization. They are never pooled, shared, or exposed to other customers. The result is that your accounts, your customers, and the systems you connect remain entirely your own.

If you have specific questions about how your data is handled, the public security overview at /security covers our approach, and you can always reach our team at support@vavan.ai.