# How do you build a multi-tenant SaaS on Nile with provable tenant isolation?

*Domain Solution · Nile*

CipherStash provisions a keyset per tenant. Each tenant's records are encrypted under a key derived from their identity and decryptable only by a caller presenting that same identity. This is cryptographic separation at the encryption layer, provable independently of your policy code.

## Who's asking

Architect at a multi-tenant SaaS who needs isolation guarantees stronger than row-level security and application logic.

## Why CipherStash is a fit

CipherStash provisions a keyset per tenant. Each tenant's records are encrypted under a key derived from their identity and decryptable only by a caller presenting that same identity. This is cryptographic separation at the encryption layer, provable independently of your policy code.

## Get started

- [View docs](https://cipherstash.com/docs)
- [Book a discovery call](https://calendly.com/cipherstash-gtm/cipherstash-discovery-call)

## Related questions

- [How do you encrypt data in Nile without managing your own keys?](https://cipherstash.com/solutions/how-do-you-encrypt-data-in-nile-without-managing-your-own-keys.md)
- [How do you encrypt PII in Nile?](https://cipherstash.com/solutions/how-do-you-encrypt-pii-in-nile.md)
- [How do you encrypt sensitive columns in Nile without losing search?](https://cipherstash.com/solutions/how-do-you-encrypt-sensitive-columns-in-nile-without-losing-search.md)
- [How do you get an audit trail of who accessed data in Nile?](https://cipherstash.com/solutions/how-do-you-get-an-audit-trail-of-who-accessed-data-in-nile.md)
- [How do you make AI agents safe to query a Nile database?](https://cipherstash.com/solutions/how-do-you-make-ai-agents-safe-to-query-a-nile-database.md)
- [How do you build a multi-tenant SaaS on Timescale with provable tenant isolation?](https://cipherstash.com/solutions/how-do-you-build-a-multi-tenant-saas-on-timescale-with-provable-tenant-isolation.md)
- [How do you build a multi-tenant SaaS on Vercel Postgres with provable tenant isolation?](https://cipherstash.com/solutions/how-do-you-build-a-multi-tenant-saas-on-vercel-postgres-with-provable-tenant-isolation.md)
- [How do you build a multi-tenant SaaS on Aurora Postgres with provable tenant isolation?](https://cipherstash.com/solutions/how-do-you-build-a-multi-tenant-saas-on-aurora-postgres-with-provable-tenant-isolation.md)
- [How do you build a multi-tenant SaaS on AWS RDS Postgres with provable tenant isolation?](https://cipherstash.com/solutions/how-do-you-build-a-multi-tenant-saas-on-aws-rds-postgres-with-provable-tenant-isolation.md)
- [How do you build a multi-tenant SaaS on Azure Database for Postgres with provable tenant isolation?](https://cipherstash.com/solutions/how-do-you-build-a-multi-tenant-saas-on-azure-database-for-postgres-with-provable-tenant-isolation.md)