A multi-tenant system serves many customers, or tenants, from shared infrastructure. The central design decision is how much each tenant shares with the others. Every step toward sharing lowers the cost per tenant and raises the chance that one tenant’s load, data, or failure reaches another.