One machine per business.
Every business gets a separate virtual machine with a hardware boundary, an encrypted volume only it can mount, and a database file that exists nowhere else.
No shared table
Two customers cannot see each other's data because there is no shared table to see it in. Isolation is a machine boundary, not a column.
Your site never touches it
Pages are static bytes at the edge. Page views never reach the machine your data is on, so a platform restart is not an outage for your customers.
Keys are per business
A provider that starts failing is parked automatically and traffic moves to another. Fix the key and it comes back without waiting out the quota window.
Questions we'll answer directly.
If you need the detail for a procurement review — where data sits, who can reach it, what we hold and for how long — ask and a person will answer.