Multi-tenant infrastructure for 500+ institutions
How I designed multi-tenant infrastructure for 500+ institutions and billions of daily queries, including tenant moves without downtime, under SOC2 and ISO27001.
Client
Higher-ed software company
Engagement
Architecture and tooling across weekly increments
Tech Stack
Related services
The Challenge
What was the problem?
The platform already served 500+ higher education institutions and handled billions of database queries a day. Growth was not a slide-deck problem. It was a “this query path has to stay up” problem. A specific operational pain sat on top of that scale: moving a client from one database to another in a multi-tenant layout, without taking them offline. That move is how you rebalance noisy neighbors, retire a shard, or isolate a tenant that needs different resources. Compliance was not optional. The work had to stay inside SOC2 and ISO27001 controls — access, logging, and change process included.
The Solution
The approach
I designed and implemented a multi-tenant, high-availability architecture aimed at that load, then built the tenant-move path as a first-class tool rather than a weekend script. The migration system moves a client between databases with checks so the cutover is planned, not improvised. Redundancy and failover sit around the hot paths so a node loss does not become an institution outage. Security and audit requirements were part of the design, not a wrap-up checklist. The same controls that satisfy SOC2 and ISO27001 also make tenant moves reviewable.
Architecture
Planned a multi-tenant layout that could grow without rewriting the product for every new campus.
Tenant moves
Built tooling to relocate a client between databases with validation and a defined cutover.
Availability
Added redundancy and failover on the paths that cannot wait for a business-hours fix.
Compliance
Kept access, logging, and change flow aligned with SOC2 and ISO27001.
Results
What changed
Outcomes from the work as shipped — no extra claims beyond what is on this page.
500+ institutions supported on the same platform
Billions of database queries handled daily
Clients can move between databases without a custom fire drill
SOC2 and ISO27001 posture maintained through the change
Want a working build in week one?
Book a call and I'll help you pick the fastest path to something you can demo.
Ready to build something great?
Every project starts with a conversation. Let's discuss your goals and how I can help you reach them.