Tenant Isolation

Tenant isolation is the technical and organizational practice of ensuring that data, resources, and computational environments remain completely separate between different customers or business units in a shared cloud or AI system. In multi-tenant AI deployments, improper isolation can lead to data leakage, unauthorized access, and compliance violations across regulated industries. This is critical for governance because it directly impacts data residency requirements, regulatory compliance under frameworks like GDPR, and the ability to audit and control access to sensitive information.

1 item

EnforcementGlobal2026-08-10

181,874 Meetings Exposed After tl;dv Ignored Six-Month Disclosure

A security researcher found that tl;dv, an AI meeting recording platform used by more than two million people, left its entire Firestore meetings database readable by any authenticated user due to a missing tenant isolation control. The exposure covered 181,874 meeting records across 84,312 users, including government agencies in 23 countries, universities, and corporations. The vulnerability was disclosed in January 2026 but remained unpatched as of July 2026, despite the company's published claims of SOC2, GDPR, and EU AI Act compliance.

tl;dv data exposure vendor risk GDPR AI meeting tools tenant isolation third-party AI risk breach notification