The verdict in three sentences
A B2B vendor that deploys one instance per customer sees hosting and maintenance costs grow linearly, and the situation becomes untenable beyond 30 customers. A multi-tenant rebuild costs CAD 60,000 to 160,000 and takes 4 to 8 months, for an infrastructure bill divided by 3 to 5 and a single deployment for all customers. The key decision is the data isolation model: by row, by schema or by database, depending on your contractual and regulatory requirements.
The three data isolation models
| Model | Principle | Rebuild cost (CAD) | Infra cost for 50 customers | Suited to |
|---|---|---|---|---|
| Row-level isolation | One database, tenant_id column, Row Level Security | 60,000 to 95,000 | CAD 600 to 1,300/month | SMB, moderate volumes, 50 to 5,000 customers |
| Schema per tenant | One database, one PostgreSQL schema per customer | 75,000 to 125,000 | CAD 1,000 to 2,200/month | Mid-market, per-customer backups |
| Database per tenant | Dedicated database, shared application | 95,000 to 160,000 | CAD 2,200 to 4,400/month | Healthcare, banking, public sector |
| Hybrid | Row by default, dedicated database as premium option | 110,000 to 160,000 | CAD 1,300 to 2,900/month | Vendors with an enterprise tier |
| Status quo (instance per customer) | Server and database per customer | 0 | CAD 5,800 to 13,000/month | Fewer than 10 customers |
Row-level isolation with PostgreSQL Row Level Security is now the default choice: it is the cheapest to operate, but demands strict testing discipline, since a badly filtered query exposes another customer's data. The hybrid model lets you sell a "dedicated database" option billed CAD 450 to 1,200 per month to enterprise accounts.
What the rebuild budget covers
| Work package | Content | Share of budget |
|---|---|---|
| Audit and design | Code mapping, model choice, migration plan | 8 to 12% |
| Tenant layer | Tenant resolution (subdomain, header), context, RLS | 15 to 20% |
| Data model rework | Tenant keys, indexes, constraints | 15 to 20% |
| Authentication and roles | Per-customer SSO, SAML/OIDC, organisation roles | 10 to 15% |
| Billing and quotas | Plans, usage limits, Stripe or equivalent integration | 8 to 12% |
| Migrating existing customers | Scripts, database merges, regression tests | 15 to 20% |
| Observability and security | Per-tenant logs, isolation tests, pentest | 8 to 12% |
Migrating existing customers is the riskiest phase: each instance has often drifted (versions, customisations, orphaned data). Plan migration in waves of 5 to 10 customers, with rollback available.
Before and after: operating metrics
| Metric | Instance per customer (40 customers) | Multi-tenant (40 customers) |
|---|---|---|
| Monthly infrastructure cost | CAD 8,700 | CAD 2,000 |
| Time to deploy a release | 2 to 3 days | 20 to 40 minutes |
| Versions in production | 4 to 7 | 1 |
| Time to onboard a new customer | 1 to 3 days | Under 5 minutes |
| Monthly DevOps time | 60 to 90 hours | 15 to 25 hours |
Mini case study
Priya, CTO of a Toronto vendor of practice management software for accounting firms, runs 42 customers, each on its own instance. Hosting costs CAD 9,100 per month and the team spends 75 hours a month deploying and maintaining versions.
- Infrastructure savings: CAD 9,100 minus CAD 2,200 = CAD 6,900 per month, i.e. CAD 82,800 per year.
- DevOps time freed: 55 hours per month at a loaded CAD 100, i.e. CAD 66,000 per year redirected to product.
- Investment: row-level rebuild with dedicated database option, CAD 120,000 over 6 months.
Need a professional website?
Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.
Estimated annual gain: CAD 148,800. Payback arrives in about 10 months, and onboarding a new customer no longer costs anything in infrastructure, which makes a free trial offer possible.
FAQ
Is multi-tenancy compatible with PIPEDA and healthcare privacy rules?
Yes, provided you document isolation and log access. For health data under Ontario's PHIPA, database-per-tenant isolation on Canadian-hosted infrastructure adds 20 to 40% to infrastructure cost.
Do we have to rewrite the whole application?
Rarely: in 70% of cases the rebuild touches the data layer, authentication and deployment without rewriting business logic. A full rewrite doubles the budget.
How do we handle a customer that wants its customisations?
Through feature flags and per-tenant settings rather than code branches. Custom work is then billed as add-on modules at CAD 200 to 900 per month.
What is the risk of cross-customer leaks?
It is controlled by Row Level Security, automated isolation tests on every query and an annual pentest at CAD 7,500 to 18,000.
Can we migrate without downtime?
Yes, with wave-based migration outside business hours: downtime per customer stays under 30 minutes.
Let's scope your project. Share your customer count, stack and isolation constraints: we quote the right model, the wave-based migration plan and a 4 to 8 month schedule. Detailed quote within 48 h. WhatsApp +221 77 596 93 33.
Mohamed Bah
Fondateur, Kolonell
Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.
