Isolation isn't a tier. It's the architecture.
Cosmic XRM deploys as an Azure managed application into your subscription. There is no shared multi-tenant database anywhere in the design.
Your deployment
What lands in your subscription
Dedicated DocumentDB cluster
Every deployment provisions its own MongoDB-compatible DocumentDB cluster. Your data is physically separate — not row-filtered in a shared store.
The application suite
The end-user app, admin app, API, and designer run as containers in your managed resource group, wired to your cluster and nobody else's.
Microsoft Entra ID
Sign-in and role-based access bind to your own Entra tenant. Admins, makers, and users are governed by roles you control.
Operations
Managed, but not opaque
The managed application model means upgrades and infrastructure are handled — while everything still runs where you can see it, in your subscription, under your policies, on your bill.
Environments
Separate development, test, and production environments within your deployment, with metadata promotion between them.
High availability
Opt-in zone-redundant mode for the database tier when your workload warrants it — a toggle, not a re-architecture.
Continuous delivery
Application updates flow from the publisher registry with health-gated rollout. Your model and your plugins are untouched by platform upgrades.
Run the platform, own the data
Install from Azure Marketplace into your subscription today.