Unique AI: Multi-Tenant SaaS
1 min read
Multi-tenant is Unique's shared SaaS offering. Customers use Unique AI directly from the existing environment that Unique operates in Azure Switzerland North, without a dedicated landing zone. It follows the same security architecture as the Single-Tenant SaaS offering, but infrastructure, storage and identity services are shared between customers.
Each customer is set up as a separate organisation within the shared environment.
Multi-tenant compared to single-tenant
Multi-tenant | Single-tenant | |
|---|---|---|
Infrastructure | Shared UNIQUE Azure subscription | Dedicated landing zone and subscription per customer |
Customer separation | Separate organisation per customer | Separate landing zone per customer |
Data at rest | Shared storage accounts, always in Switzerland North | Dedicated storage in the customer's landing zone |
Processing | Shared backend service instances | Dedicated backend services |
Identity | Shared Zitadel instance, optional SSO with the customer IdP | Dedicated Zitadel instance, optional SSO with the customer IdP |
Encryption | UNIQUE-managed RSA-HSM keys at rest, TLS 1.2+ in transit | Same |
Security monitoring | MS Defender for Cloud, MS Sentinel SIEM, 24/7 SOC | Same |
Data residency
All data is stored and processed in Switzerland by default, including inference with Azure OpenAI. Data leaves Switzerland only for EU inference on spaces where it is enabled, for models other than Azure OpenAI, for Bing grounding, or for web search. Even then, at most the prompt and the retrieved document chunks are sent, never full documents. For details, see Security Architecture - Multi-tenant Chat.