Multi Tenancy Progress

Multi-tenancy: progress tracker

Part of the Multi-tenancy section. Planned / in active development. Tracks the build against the plan. Last updated: 2026-06-21.

Legend: ✅ done  ·  🚧 in progress / next  ·  ⬜ not started

Where things stand: the foundation is complete, tickets scope by company, and per-company email routing now works end-to-end — you can pin a mailbox to a company or run a shared inbox sorted by the sender's domain, and anything that matches no company waits safely in a triage queue. Outbound reply identity and rolling scoping through the other modules are what's left.

---

Phase 0 — Foundation ✅ complete

The invisible plumbing. None of this changes anything on a single-company install.

• ✅ tenants table + a silent Default company that owns all existing data
• ✅ tenant_domains table (for future email-domain routing)
• ✅ Analyst → company access model (which staff can see which companies, + an "all companies" flag)
• ✅ tenant_id on tickets (every existing ticket assigned to the Default company)
• ✅ Shared tenancy helper — the single choke-point all tenant logic routes through
• ✅ Active-company session context
• ✅ Company switcher in the header (appears only once a 2nd company exists)
• ✅ System → Companies admin page (list / create / rename companies)

Phase 1 — Tickets ✅ core complete

Making the tickets module company-aware.

• ✅ Ticket list scopes to the active company
• ✅ New tickets are stamped with the active company
• ✅ Folder count badges (departments / statuses / analysts / unassigned) scope to the active company
• ⬜ Ticket detail / remaining ticket endpoints scoped (defence-in-depth)

Phase 2 — Per-company mailboxes & email routing ✅ core complete

So an MSP can receive each client's email and have it land under the right company.

• ✅ Link mailboxes to companies (pinned = one mailbox per company, shared intake = one inbox sorted by sender) — set in Tickets → Settings → Mailboxes
• ✅ Register each company's email domains — managed in System → Companies
• ✅ Route incoming email to the right company by sender domain (covers both Microsoft & Gmail import)
• ✅ Triage queue for unmatched / unknown senders — reached from the company switcher, with one-click filing and "route this domain" (which sweeps the domain's other queued mail and auto-routes future mail)
• ✅ Public-email (Gmail/Outlook/…) addresses are tagged and filed individually — never auto-mapped (different clients share them)
• ⬜ Replies sent from the company's own mailbox (outbound identity) (next up)

Routing rule (first match wins): reply to an existing ticket → inherits its company; otherwise a pinned mailbox → its company (sender ignored); otherwise a shared mailbox → matched by sender domain → that company, or triage if nothing matches. On a single-company install this is invisible — everything lands under the one Default company exactly as before.

Ideas parked for later: an email routing visualiser (type a From/To and see where it would land and why) and a customisable public-email domain list.

Phase 3+ — Roll scoping through the other modules ⬜ not started

• ⬜ Assets, CMDB, Change Management, Calendar, Forms, Network Mapper
• ⬜ Knowledge — per-company and global articles (two-axis visibility)
• ⬜ Per-module Settings: split into global vs per-company

Self-service portal ⬜ not started (design done)

• ⬜ Global requester identity — one login, tickets across companies, each badged
• ⬜ Portal scoping + the "only your own tickets" guardrails
• ⬜ Per-company branded portals / per-company SSO (optional, later)

---

Cross-cutting / housekeeping

• ⬜ README documentation (deferred until the feature nears release)
• ⬜ Companies: delete / archive management (today you can only deactivate)
• ⬜ Automated isolation tests (guarding against one company seeing another's data)

---

This page is maintained by hand as work lands — see the GitHub roadmap issue (#24) for live discussion.