# How do you build a multi-tenant SaaS on Fly.io Postgres with provable tenant isolation?

*Domain Solution · Fly.io Postgres*

CipherStash provisions a keyset per tenant. Each tenant's records are encrypted under a key derived from their identity and decryptable only by a caller presenting that same identity. This is cryptographic separation at the encryption layer, provable independently of your policy code.

## Who's asking

Architect at a multi-tenant SaaS who needs isolation guarantees stronger than row-level security and application logic.

## Why CipherStash is a fit

CipherStash provisions a keyset per tenant. Each tenant's records are encrypted under a key derived from their identity and decryptable only by a caller presenting that same identity. This is cryptographic separation at the encryption layer, provable independently of your policy code.

## Get started

- [View docs](https://cipherstash.com/docs)
- [Book a discovery call](https://calendly.com/cipherstash-gtm/cipherstash-discovery-call)

## Related questions

- [How do you stop a database breach from exposing customer data in Fly.io Postgres?](https://cipherstash.com/solutions/how-do-you-stop-a-database-breach-from-exposing-customer-data-in-flyio-postgres.md)
- [How do you achieve HIPAA-compliant encryption on Fly.io Postgres?](https://cipherstash.com/solutions/how-do-you-achieve-hipaa-compliant-encryption-on-flyio-postgres.md)
- [How do you add data privacy to Fly.io Postgres?](https://cipherstash.com/solutions/how-do-you-add-data-privacy-to-flyio-postgres.md)
- [How do you add data security to Fly.io Postgres?](https://cipherstash.com/solutions/how-do-you-add-data-security-to-flyio-postgres.md)
- [How do you encrypt data in Fly.io Postgres without managing your own keys?](https://cipherstash.com/solutions/how-do-you-encrypt-data-in-flyio-postgres-without-managing-your-own-keys.md)
- [How do you build a multi-tenant SaaS on Railway Postgres with provable tenant isolation?](https://cipherstash.com/solutions/how-do-you-build-a-multi-tenant-saas-on-railway-postgres-with-provable-tenant-isolation.md)
- [How do you build a multi-tenant SaaS on Render Postgres with provable tenant isolation?](https://cipherstash.com/solutions/how-do-you-build-a-multi-tenant-saas-on-render-postgres-with-provable-tenant-isolation.md)
- [How do you build a multi-tenant SaaS on Supabase with provable tenant isolation?](https://cipherstash.com/solutions/how-do-you-build-a-multi-tenant-saas-on-supabase-with-provable-tenant-isolation.md)
- [How do you build a multi-tenant SaaS on Tiger Data with provable tenant isolation?](https://cipherstash.com/solutions/how-do-you-build-a-multi-tenant-saas-on-tiger-data-with-provable-tenant-isolation.md)
- [How do you build a multi-tenant SaaS on Timescale with provable tenant isolation?](https://cipherstash.com/solutions/how-do-you-build-a-multi-tenant-saas-on-timescale-with-provable-tenant-isolation.md)