Each workspace keeps its own tickets, files, and policies

Ticketit is multi-tenant on one database. Every server entry point resolves a workspace before it reads or writes tenant-owned rows.

Membership is per organization. The same person can be a loaded specialist in one workspace and idle in another. Global role is not the routing source of truth.

Files land under that workspace's storage path. A client-supplied upload path is ignored. Downloads go through an authorized app route, not a permanent public storage URL.

A Support Session can act as a member of one organization for a short window. It can change that tenant's data. It cannot change who has access.