Why Did Our Internal AI Share Confidential Customer Data in Chat?

Multi-tenant leakage: when shared context vectors leak Private Client A to Client B.

The Sub-Millisecond Code Fix

Exogram separates customer data into physically distinct SQLite databases per tenant. The agent cannot query across database boundaries, making cross-tenant data leakage physically impossible.

import { ExogramTenantContext } from '@exogram/sdk';

export async function queryClientKnowledge(tenantId: string, userQuery: string) {
    // Isolated tenant boundary: physically impossible to access another tenant's vector space
    const tenant = await ExogramTenantContext.load(tenantId);
    return tenant.queryVerifiedContext(userQuery);
}