> ## Documentation Index
> Fetch the complete documentation index at: https://docs.sontairo.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Data Isolation

> How Sontairo ensures complete data separation between projects

Sontairo enforces strict data isolation between projects at both the API and database levels.

## How It Works

Every project-scoped resource has a `projectId` field. When a project is selected:

1. **Server-side**: API routes filter queries by `projectId`, ensuring only matching resources are returned
2. **Client-side**: All fetch calls include the current `projectId` as a query parameter or in the request body
3. **Mutations**: Create, update, and delete operations verify the resource belongs to the current project

## What's Isolated

* **Agents** — Each agent belongs to one project
* **Connectors** — Connector instances are per-project
* **Chat Conversations** — Conversations and their messages are project-scoped
* **Agent Memory** — Memory entries are isolated per project
* **Automations** — Workflow definitions, versions, and runs belong to a specific project
* **Runs** — Task execution records are tied to the project they were initiated in

## What's Shared

Some resources are intentionally workspace-scoped:

* **Provider Keys** — AI model API keys are shared across all projects
* **Approvals** — Approval requests are visible workspace-wide
* **Billing** — Subscriptions and usage are per workspace
* **Audit Logs** — Activity logs span the entire workspace