Download our free resource about how to build a multi tenant SaaS application on AWS! www.clickittech.com/building-multi-tenant-saas-architecture-ebook/
A multi schema architecture within a single database is not HIPAA compliant, since the data from different clients/tenants are still "living" in the same database server or service. Let's say you have a MySQL database server, and you are running a MySQL service with different schemas per each tenant within the same MySQL service, and since all the info (PHI) is in the same database service... well that makes it uncompliant. Alfonso Valdes
@@ponchitovc thank you. I understand that keeping confidentiality and integrity per tenant is must for HIPAA. What if a single table is used for multi tenant, but row level encryption is used per tenant, like postgres provides. Would is still be HIPAA uncomplaint ?
@@swagat516 Have you received answer for this as I am also searching for the same. HIPAA compliance problem with distributed table in Azure Cosmos db for Postgresql. Can row level security work while using this service as multi-tenant?
@@pallavij8672 yes, it should as long as each tenant data is logically separated and isolated. Each tenant should have explcit control of the data. We ended up using a single AWS RDS instance, but separate database for each tenant, with unique tenant credentials. Credentials must be rotated. Then it's HIPAA compliant 100%
I excluded to make it easy and talk about just 3 architectures, but i will include in my super Multi tenant architecture article. In this article I cover the whole multi-tenant architecture ecosystem: www.clickittech.com/saas/multi-tenant-architecture/ - Thank you
حفظ الترجمة if I try to make a comparison between SaaS app multiDatabase and SaaS App Uni Database what are the performance criteria that must be taken into account during this comparison. thank you very much
I have a question. We are developing a website where multiple users have to login and use. There are multiple tables whose data are user specific. I have doubt when I say table is multitenant should I include userID as a column to restrict users from accessing other users info or a column to restrict role based access like, user, admin, super admin or organization specific like if 2 organizations are using same website. Thanks in advance.
Download our free resource about how to build a multi tenant SaaS application on AWS!
www.clickittech.com/building-multi-tenant-saas-architecture-ebook/
This is very helpful. Exactly the knowledge I came on here for. Thank you very much.
Great! Glad it helped to you
This is very helpful, can you explain a bit more on how the multi schema architecture is not HIPAA compliant ?
A multi schema architecture within a single database is not HIPAA compliant, since the data from different clients/tenants are still "living" in the same database server or service. Let's say you have a MySQL database server, and you are running a MySQL service with different schemas per each tenant within the same MySQL service, and since all the info (PHI) is in the same database service... well that makes it uncompliant. Alfonso Valdes
@@ponchitovc thank you. I understand that keeping confidentiality and integrity per tenant is must for HIPAA. What if a single table is used for multi tenant, but row level encryption is used per tenant, like postgres provides. Would is still be HIPAA uncomplaint ?
@@swagat516 Have you received answer for this as I am also searching for the same. HIPAA compliance problem with distributed table in Azure Cosmos db for Postgresql. Can row level security work while using this service as multi-tenant?
@@pallavij8672 yes, it should as long as each tenant data is logically separated and isolated. Each tenant should have explcit control of the data. We ended up using a single AWS RDS instance, but separate database for each tenant, with unique tenant credentials. Credentials must be rotated. Then it's HIPAA compliant 100%
Thanks this was perfect. However I think you missed designing a schema using a tenant_id approach? Or did you exclude on purpose?
I excluded to make it easy and talk about just 3 architectures, but i will include in my super Multi tenant architecture article. In this article I cover the whole multi-tenant architecture ecosystem: www.clickittech.com/saas/multi-tenant-architecture/ - Thank you
@@ponchitovc Thanks, love your presentation type!
So the third model is similar to single tenant architecture right
Can I have ppt regarding this that you have explained in this video
حفظ الترجمة
if I try to make a comparison between SaaS app multiDatabase and SaaS App Uni Database
what are the performance criteria that must be taken into account during this comparison.
thank you very much
tHANKS
can't forget splitting tenants by a row identifier.
I have a question. We are developing a website where multiple users have to login and use. There are multiple tables whose data are user specific. I have doubt when I say table is multitenant should I include userID as a column to restrict users from accessing other users info or a column to restrict role based access like, user, admin, super admin or organization specific like if 2 organizations are using same website. Thanks in advance.
I have the same issue plz reach out to me if you have found a solution for this
there is a very disturbing sound in the backgrounddddddd