Enterprise SaaS Architecture: Getting Multi-Tenancy Right
The tenancy, billing, and access-control decisions that are expensive to change later — made once, correctly, instead of retrofitted after your first ten enterprise customers.
Enterprise SaaS architecture is mostly decided in the first few weeks of a project, whether a team realizes it or not. Tenancy model, billing structure, and access control are all expensive to change once real customer data depends on them.
Choose a tenancy model deliberately
- Shared database, shared schema: cheapest to run, hardest to isolate — appropriate for low-sensitivity data at scale.
- Shared database, separate schema: a reasonable middle ground for most B2B SaaS.
- Separate database per tenant: highest isolation, highest operational cost — usually reserved for enterprise/compliance-heavy customers.
Model access control around real organizations, not just users
Enterprise customers have teams, roles, and hierarchies — a permission model built only around individual users will not survive contact with a real enterprise buyer's procurement checklist. Model organizations and roles as first-class entities from the start.
Treat billing as core infrastructure, not a bolt-on
Usage-based pricing, seat-based pricing, and enterprise custom contracts all need to coexist eventually. Designing the billing data model to support more than one pricing structure from the start avoids a painful migration once your second enterprise deal has different terms than your first.
Plan the audit trail before compliance asks for it
An audit log added after a customer's security review fails is a much harder project than one designed in from the start. Log meaningful actions — not just errors — from day one.
Key Takeaways
- Pick a tenancy model deliberately based on isolation needs, not by default.
- Model organizations and roles, not just individual users, from the start.
- Design billing and audit logging as core infrastructure, not later add-ons.
Fastly Engineering Team
This article represents the collective engineering knowledge and standards of the Fastly team, not a single author.
Fastly Engineering
Where This Gets Applied
Ideas like this one show up directly in how we scope and build client projects — not just in what we write about.
Related Articles
- DevOps2 min read
Scaling Modern Web Applications Without a Rewrite
The architectural decisions that let a system handle 10x growth by adding capacity, not by rebuilding from scratch.
Read Article - Security1 min read
API Security Checklist for Modern Applications
A practical checklist of the API security fundamentals most breaches actually come from — not exotic attacks, basic gaps.
Read Article
Related Services
SaaS Development
End-to-end SaaS platforms, including multi-tenant architecture, billing, and the infrastructure to scale from first customer onward.
Learn More about SaaS DevelopmentEnterprise Software Development
Internal tools and enterprise systems built to integrate with existing infrastructure and meet real compliance requirements.
Learn More about Enterprise Software Development
Related Case Studies
Reference architectures and concept demonstrations touching this service.
- Reference Architecture
Enterprise ERP Platform
A reference architecture for internal enterprise systems, treating integration, access control, and audit trails as first-class concerns.
View Demonstration - Reference Architecture
Multi-Vendor Marketplace
A reference architecture for connecting multiple vendors to buyers — payments, trust, and matching mechanics.
View Demonstration
Frequently Asked Questions
Can we start with shared-schema tenancy and migrate later?
Yes, but migrating live customer data between tenancy models is a real project — it is worth deciding deliberately upfront rather than assuming a future migration will be easy.
When does a SaaS platform need per-tenant databases?
Typically when a specific customer segment (regulated industries, large enterprise) requires data isolation stronger than schema-level separation can guarantee.
Ready to Apply This to Your Project?
Reading about it is one thing — tell us what you're building and we'll respond directly.