CAIQ v4
Control DSP-03
Extractive Review Standard
How to answer 'How is multi-tenant customer data logically or physically isolated?' on a CAIQ
Reviewer Guidance & Pitfalls
Detail logical tenant isolation mechanisms (e.g., row-level security / tenant_id filtering on every query, per-tenant encryption keys, or isolated database schemas) and automated test verification.
Example Answer Passing Enterprise Audit
Compliant Response Template
Customer data is logically isolated using database Row-Level Security (RLS) policies enforcing tenant_id boundaries on every transaction, validated continuously via automated integration tests (SOC 2, CC6.1).
Filling out a CAIQ or SIG Lite right now?
QuietQuestionnaire automatically drafts answers with citations from your own SOC 2 report, catches contradictions reviewers reject, and locks exports behind cryptographic human sign-off.
Zero spam. 100% confidential. No credit card required.