September 2026
Tenant isolation is the product for groups
Shared community capacity is correct for one Free school and wrong the moment a group needs legal and operational separation.
Nawras company tenants get a separate database and Keycloak identity. That is a physical fact of the architecture, not a compliance slogan.
Free stays on community capacity so a school can start in minutes. We do not pretend that model is a group deployment.
When you upgrade, you are not buying a skin on the same schema. You are getting a workspace whose data and login do not sit beside unrelated Free schools.
Ask any vendor claiming multi-tenant education SaaS what 'tenant' means in the database. If the answer is a column, it is not the same product.