Tenants¶
A tenant is the top-level organizational boundary in IPTO. Every resource -- datasets, objects, API keys, billing records -- belongs to exactly one tenant.
What is a tenant?¶
When you sign up for IPTO, a tenant is created for your organization. The tenant acts as the security and ownership perimeter for everything you do on the platform:
- All data you upload is scoped to your tenant.
- All API keys you create are scoped to your tenant.
- All billing and usage records are attributed to your tenant.
- All team members operate within the context of your tenant.
Think of a tenant as your organization's account on the platform.
Tenant isolation¶
IPTO enforces strict data separation between tenants.
Isolation guarantee
Data belonging to one tenant is never accessible to another tenant unless explicitly shared through the marketplace. Cross-tenant data leakage is treated as a platform-level security incident.
- Storage is partitioned by tenant.
- Search indexes are scoped by tenant.
- API requests are always resolved to a single tenant context.
- Administrative actions in one tenant have no effect on another.
Roles¶
Every team member belongs to a tenant through a membership that carries one or more roles. Roles determine what actions a member can perform within the tenant.
| Role | Description |
|---|---|
owner | Full tenant control, including ownership transfer and deletion. |
admin | Operational control over all tenant resources without ownership transfer. |
seller_manager | Manages dataset listings, pricing configuration, and provider analytics. |
buyer_manager | Manages buyer entitlements, API keys, and usage monitoring. |
operator | Limited operational visibility for day-to-day monitoring. |
viewer | Read-only access to tenant resources and dashboards. |
Note
The first user who signs up becomes the tenant owner. Additional members are invited and assigned roles by the owner or an admin.
Dual-role tenants¶
A single tenant can act as both a data provider and a data buyer at the same time. There is no need to create separate accounts.
- As a provider, the tenant uploads datasets, configures monetization, and earns revenue from buyer retrievals.
- As a buyer, the same tenant searches the marketplace, retrieves data from other providers, and pays metered usage charges.
Provider-side and buyer-side capabilities are managed independently within the same tenant.
Tenant statuses¶
A tenant moves through the following statuses over its lifetime:
| Status | Description |
|---|---|
active | The tenant is fully operational. All features are available. |
suspended | The tenant has been suspended (e.g., for billing or policy reasons). Access is restricted until the suspension is resolved. |
pending_deletion | A deletion request has been submitted. The tenant enters a grace period before permanent removal. |
deleted | The tenant and all associated data have been permanently removed. This state is terminal. |
Plan tiers¶
IPTO offers four plan tiers that determine the features, limits, and support level available to a tenant.
| Tier | Description |
|---|---|
| Free | Explore the platform with limited usage allowances. Suitable for evaluation and prototyping. |
| Starter | For small teams getting started with data marketplace workflows. Includes higher usage limits and basic support. |
| Professional | For production workloads that require higher throughput, advanced analytics, and priority support. |
| Enterprise | For organizations with custom requirements, dedicated support, and tailored terms. |
Tip
You can upgrade your plan tier at any time through the dashboard or by contacting the sales team. Downgrades take effect at the next billing cycle.
FAQ¶
Can a single person belong to multiple tenants?
Yes. A user can be a member of multiple tenants, each with its own role assignment. You switch between tenant contexts in the dashboard or by using the appropriate API credentials.
Can I rename my tenant?
Yes. The tenant display name can be updated at any time by an owner or admin. The underlying tenant_id is immutable.
What happens when a tenant is suspended?
A suspended tenant retains its data, but most operations are restricted. Datasets remain indexed but are not returned in marketplace search results. API key requests are rejected. The suspension must be resolved before normal operations resume.
Is there a limit to how many members a tenant can have?
Member limits depend on your plan tier. Free and Starter tiers have a cap on team size, while Professional and Enterprise tiers support larger teams. Check your plan details for the exact limits.
Can I transfer ownership of a tenant?
Yes. The current owner can transfer ownership to another member who already belongs to the tenant. Ownership transfer is an audited action and requires explicit confirmation.