Why we chose physical isolation over shared tenancy

The standard SaaS playbook

Most SaaS platforms use shared tenancy: all clients share the same database, separated by filters — a client ID column that ensures Company A only sees Company A's data. It's efficient, it's cheap to operate, and for most applications, it works fine.

But mining is not "most applications."

Geological data is often the most valuable intellectual property a mining company owns. Collar coordinates, assay results, and resource models represent millions in exploration investment. In many jurisdictions, this data has regulatory significance. And in competitive markets, even knowing where a company is drilling is commercially sensitive.

What shared tenancy really means

In a shared database, your data lives in the same tables as every other client's data. The only thing standing between your resource model and another company's queries is a WHERE clause. Consider what this implies:

• A single bug in a query filter could expose data across clients.
• A database administrator has access to every client's data simultaneously.
• Performance issues from one client's large queries can impact all clients.
• Regulatory compliance becomes a shared concern — one client's audit requirements affect the infrastructure serving everyone.

In mining, the question isn't "is shared tenancy secure enough?" — it's "can you explain to your board why your geological data shares infrastructure with a competitor?"

StratumGeo's approach: one client, one environment

Every StratumGeo client gets a fully isolated environment. This isn't a marketing term — it means a dedicated database instance where your data physically cannot be accessed by another client's queries, users, or administrators.

What this means in practice

Zero data leakage risk. There's no filter to misconfigure because there's no shared data to filter. Your geological data exists in a completely separate environment from every other client.

Independent performance. Another client running a massive resource estimation query doesn't slow down your team's daily operations. Your performance is yours alone.

Simplified compliance. Need to prove data residency? Your environment can be deployed in a specific geographic region. Need to demonstrate access controls for an audit? Your user list and access logs are self-contained.

On-premises option. Because each client has an independent environment, deploying on your own infrastructure is architecturally straightforward — not a re-engineering project.

The trade-off we're willing to make

Physical isolation costs more to operate than shared tenancy. More environments mean more infrastructure, more maintenance, more monitoring. Most SaaS vendors avoid this because it reduces their margins.

We made a deliberate choice: data security and sovereignty are non-negotiable for mining companies, and we'd rather build an architecture that reflects that from day one than try to retrofit it later.

This decision shaped every layer of StratumGeo's platform — from how we manage deployments to how we design audit trails to how we approach access control. And it's a decision we believe will matter more, not less, as regulatory requirements around geological data continue to tighten globally.

A foundation, not a feature

We don't list "physical isolation" as a premium feature with an upsell. It's the foundation. Every StratumGeo client, regardless of plan size, gets a fully isolated environment. Because when it comes to your geological data, "good enough" security isn't good enough.