"Can my data end up in another business's account?"
It's the most common question when you share a system with other businesses. The technical answer is long — but as a customer, there are three questions you should ask.
If several businesses use the same software at once — a booking system, a menu platform, an order panel, it doesn't matter — this question always comes up: "Will my customer list be visible to another business?"
You're right to ask. It should come before price.
## Same system, separate data
Running a separate server per business is possible, but expensive and slow. The common approach is one system serving everyone, with each record marked as belonging to a particular business.
Done properly, that's safe. Done badly, forgetting a single filter in one query is enough to show one business's data to another.
## Don't rely on remembering the filter
Here's the key: hoping "the developer won't forget to write the filter every time" is not a security method.
Instead we build a single door every query passes through, and apply the filter there. A rule that would have to be remembered in a hundred places becomes a rule enforced in one.
Where the database supports it, we add a second layer: the database itself knows which rows each caller may read. Even if the application has a bug, it won't hand over the wrong row. That's how Aurea works.
## Test it, don't assume it
"Business A cannot see business B's data" must not stay an assumption. It should be a test, and it should run automatically on every change.
Because as the system grows, new screens, new reports and new exports get added. Each one opens another door to the data. That isn't something a human can track by eye.
## What to ask as a customer
You don't need to know the technical detail. These three questions are enough:
**"Where is the separation actually enforced?"** If the answer is "we're careful in every query", that's a weak answer. "Everything goes through one place" is a good one.
**"Do you test for it?"** The answer should be a clear yes.
**"Can I export my data whenever I want?"** If you can't, the system is locking you in commercially, not technically.
## Finally
Stay away from developers who find this topic boring. It being boring for *you* is a good sign — it means it works quietly in the background and never comes up.