Multi Tenancy Progress

Multi-tenancy: progress tracker

Part of the Multi-tenancy section. Planned / in active development. Tracks the build against the plan. Last updated: 2026-06-21.

Legend: ✅ done  ·  🚧 in progress / next  ·  ⬜ not started

Where things stand: the foundation is complete and tickets are starting to scope by company — you can create companies, switch between them in the header, and the ticket list filters to the selected company. Email routing (per-company mailboxes) and the other modules are still ahead.

---

Phase 0 — Foundation ✅ complete

The invisible plumbing. None of this changes anything on a single-company install.

• ✅ tenants table + a silent Default company that owns all existing data
• ✅ tenant_domains table (for future email-domain routing)
• ✅ Analyst → company access model (which staff can see which companies, + an "all companies" flag)
• ✅ tenant_id on tickets (every existing ticket assigned to the Default company)
• ✅ Shared tenancy helper — the single choke-point all tenant logic routes through
• ✅ Active-company session context
• ✅ Company switcher in the header (appears only once a 2nd company exists)
• ✅ System → Companies admin page (list / create / rename companies)

Phase 1 — Tickets 🚧 in progress

Making the tickets module company-aware.

• ✅ Ticket list scopes to the active company
• ✅ New tickets are stamped with the active company
• 🚧 Folder count badges scope to the active company (next up)
• ⬜ Ticket detail / remaining ticket endpoints scoped (defence-in-depth)

Phase 2 — Per-company mailboxes & email routing ⬜ not started

So an MSP can receive each client's email and have it land under the right company.

• ⬜ Link mailboxes to companies (pinned = one mailbox per company, shared intake = one inbox sorted by sender)
• ⬜ Register each company's email domains
• ⬜ Route incoming email to the right company by sender domain
• ⬜ Triage queue for unmatched / unknown senders
• ⬜ Replies sent from the company's own mailbox (outbound identity)

(Today, all incoming email lands under the Default company — a fine interim state.)

Phase 3+ — Roll scoping through the other modules ⬜ not started

• ⬜ Assets, CMDB, Change Management, Calendar, Forms, Network Mapper
• ⬜ Knowledge — per-company and global articles (two-axis visibility)
• ⬜ Per-module Settings: split into global vs per-company

Self-service portal ⬜ not started (design done)

• ⬜ Global requester identity — one login, tickets across companies, each badged
• ⬜ Portal scoping + the "only your own tickets" guardrails
• ⬜ Per-company branded portals / per-company SSO (optional, later)

---

Cross-cutting / housekeeping

• ⬜ README documentation (deferred until the feature nears release)
• ⬜ Companies: delete / archive management (today you can only deactivate)
• ⬜ Automated isolation tests (guarding against one company seeing another's data)

---

This page is maintained by hand as work lands — see the GitHub roadmap issue (#24) for live discussion.