← All questions
Data, Privacy & LegalMedium· Compliance· Data Residency· Security

Every query in your system filters on tenant_id. A cust...

Logical isolation via tenant filtering does not satisfy physical data residency requirements. A critical vulnerability exists in the embedding process: the source text content may be sent to an external service or region for vectorization before it is ever stored in your database. Therefore, relying solely on a tenant filter is insufficient for DPA compliance.

Code playground (Python)