How does multi-client work stay separated?
Use a separate workspace per client when a hard boundary matters. Each workspace carries its own Brand Kit context and connected accounts, database tenant policies isolate workspace rows, and roles control who can draft, review, connect accounts, and publish. This is a tenant boundary, not a claim that an in-workspace brand selector makes mistakes impossible.
- Separate workspace Brand Kit context per strictly isolated client
- Workspace isolation enforced by database tenant policies
- Roles and invitations for account teams
- Recorded advisory review decisions; publishing stays separate
- Provider receipts per delivery — client-showable state