ADR-002: Multi-Tenant Data Model with PostgreSQL and RLS

• Status: Accepted
• Date: 2026-02-07

Context

CFP requires tenant isolation, data residency controls, and consistent transactional behavior for control plane metadata.

Decision

Use PostgreSQL as the system of record and enforce tenant isolation with row-level security (RLS) and schema-level partitioning where required.

Consequences

• Strong consistency and mature tooling.
• RLS policies must be carefully validated and tested.
• Supports regional isolation by deploying per-region clusters.