The verdict in three sentences
Beyond 25 to 30 customers, the one-instance-per-customer model costs more in hosting, updates and support than a well-designed multi-tenant platform. The rebuild runs EUR 60,000 to 180,000 (roughly USD 65,000 to 195,000) depending on the isolation model and existing debt, for a cloud bill that typically drops from EUR 4,000 to 900 a month. The real risk is organizational rather than technical: a progressive migration, customer by customer, with clear cutover metrics, avoids a platform-wide outage.
Single-tenant versus multi-tenant: real costs
With 40 customers on 40 servers, every fix ships 40 times, every database upgrade is a mini-project and every new customer takes half a day to set up.
| Monthly item (40 customers) | Instance per customer | Shared multi-tenant | Difference |
|---|---|---|---|
| Servers and databases | EUR 3,200 | EUR 650 | -80% |
| Backups and monitoring | EUR 500 | EUR 150 | -70% |
| Certificates, DNS, CDN | EUR 300 | EUR 100 | -67% |
| Total hosting | EUR 4,000 | EUR 900 | -78% |
| Time to deploy a release | 2 to 3 days | 15 to 30 minutes | Order of magnitude |
| New customer onboarding | 4 hours | 5 minutes (self-service) | Automated |
| Estimated DevOps load | 0.8 FTE | 0.2 FTE | 0.6 FTE freed |
Hosting savings alone, about EUR 37,000 a year, do not always justify the rebuild. Adding the freed DevOps time (0.6 FTE, roughly EUR 35,000 to 45,000 fully loaded per year) is what makes the project pay back in 2 to 3 years.
Choosing the data isolation level
This is the structural decision. It drives development cost, the security level enterprise buyers perceive and how easy migration will be.
| Isolation model | Principle | 2026 rebuild cost | Perceived security | Best for |
|---|---|---|---|---|
| Row-level (tenant_id) | One database, a customer column on every table | EUR 60,000 to 100,000 | Medium, code-dependent | SMB, many small customers |
| Row-level + PostgreSQL Row Level Security | Filtering enforced by the database | EUR 70,000 to 120,000 | Good | Most B2B vendors |
| Schema per tenant | One schema per customer in one database | EUR 90,000 to 140,000 | Good | 20 to 500 customers, sensitive data |
| Database per tenant, shared code | Dedicated database, single application | EUR 110,000 to 160,000 | Very good | Enterprise, contractual demands |
| Hybrid (shared + dedicated premium) | Small customers shared, large ones isolated | EUR 130,000 to 180,000 | Flexible | Vendor with an enterprise tier |
For most B2B vendors, row-level isolation combined with Row Level Security gives the best cost and security balance. The hybrid model makes sense once 10 to 15% of revenue comes from customers demanding a dedicated database.
Subdomains, usage-based billing and security
Three building blocks come on top of the core rebuild. Subdomain management (customer.yourvendor.com) and custom domains with automatic certificates cost EUR 5,000 to 12,000. Usage-based billing (seats, document volume, API calls) wired to Stripe Billing or Chargebee adds EUR 8,000 to 20,000, plus 0.5 to 0.8% of billed revenue. Finally, automated isolation tests, which check that one customer can never read another's data, plus a penetration test before cutover cost EUR 6,000 to 15,000. Do not cut them: a cross-tenant leak is the incident that destroys a vendor's credibility and triggers regulatory exposure under PIPEDA in Canada or GDPR in Europe.
Progressive migration plan
| Phase | Scope | Duration | Validation metric |
|---|---|---|---|
| 1. Foundations | Tenant model, auth, RLS, subdomains | 6 to 10 weeks | 100% of isolation tests green |
| 2. Pilot | Migrate 2 to 3 volunteer customers | 3 to 4 weeks | Zero blocking incident for 15 days |
| 3. Wave 1 | 10 to 15 standard customers | 4 to 6 weeks | p95 response time under 400 ms |
| 4. Wave 2 | Remaining customers, except special cases | 4 to 6 weeks | Support tickets stable or falling |
| 5. Decommissioning | Shut down legacy servers | 2 weeks | Cloud bill under EUR 1,000 a month |
Plan 5 to 7 months in total. Keep legacy instances read-only for 30 days after each wave so you can roll back.
Need a professional website?
Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.
Mini case study
Julie, CTO of a construction management software vendor in Toronto, runs 40 customers on 40 servers. Chosen rebuild: row-level isolation with Row Level Security, subdomains and usage-based billing, for EUR 115,000. Annual gains: EUR 37,200 in hosting (EUR 4,000 down to 900 a month) and 0.6 FTE of DevOps redeployed to product, valued at EUR 40,000. Total: EUR 77,200 a year. Payback in 18 months, not counting self-service onboarding that lets her sign small customers who were previously unprofitable.
FAQ
How much does moving to a multi-tenant architecture cost?
Between EUR 60,000 and 180,000 in 2026 depending on the isolation model and the state of existing code. Row-level isolation with Row Level Security typically lands between EUR 70,000 and 120,000.
At how many customers does multi-tenant pay off?
In practice from 25 to 30 customers, when hosting exceeds EUR 2,500 to 3,000 a month and deployments tie up more than half an FTE. Below that, the rebuild takes more than 4 years to pay back.
Is multi-tenant less secure than a dedicated instance?
Not when well designed: Row Level Security and automated isolation tests sharply reduce the risk. For the 10 to 15% most demanding customers, a hybrid model with a dedicated database remains an option.
How long does the migration take?
Plan 5 to 7 months, including 6 to 10 weeks of foundations and a wave-based migration. A single-weekend cutover is strongly discouraged beyond 10 customers.
Can we bill by usage from the rebuild onward?
Yes, it is the right moment: wiring Stripe Billing or Chargebee costs EUR 8,000 to 20,000. Vendors switching to usage pricing often see 10 to 20% extra revenue on large accounts.
Let's scope your project. Tell us your customer count, your stack and your current cloud bill: we will frame the isolation model, the indicative rebuild budget and the migration schedule. Detailed quote within 48 h. WhatsApp +221 77 596 93 33.
Mohamed Bah
Fondateur, Kolonell
Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.
