01
Tenant and branch boundaries
Every operational record belongs to an organisation, with school and branch scope where needed. Access checks run before protected workspace actions.
- ✓Tenant-aware queries
- ✓Branch assignments
- ✓Central suspension controls