Multi-tenant & resellers
Multi-tenant phone system for resellers
Many clients, one appliance — each fully isolated.
Pentacomm is multi-tenant at its core: a single appliance hosts many clients in complete isolation, each with their own configuration, numbers, agents and recordings. Isolation is enforced in the database (row-level security), not left to the application — a client can never see another's data.
The problem
Reselling telephony demands real isolation, not convention.
A reseller or MSP hosting several clients on the same platform has one critical requirement: isolation. One client's data — numbers, recordings, reports — must never be visible to another. Many platforms handle this with application-layer filtering, which is exactly where leaks happen.
Pentacomm enforces isolation at the database layer, via PostgreSQL row-level security. Each tenant is fully separate by construction, administered independently, with its own classes of service and per-tenant encrypted recordings. You host many clients on one appliance, with minimal operating surface.
Capabilities
Built for multi-client hosting
Real isolation, per-tenant administration and low cost per client.
- Database-enforced isolation — PostgreSQL row-level security per tenant; separation doesn't depend on the application code being correct.
- Per-tenant administration — Each client with their own configuration, numbers, extensions, queues and agents, administered independently.
- One appliance, many clients — Host many organizations on one platform, with reduced operating surface and cost per client.
- Per-tenant encrypted recording — Separate per-tenant recordings, encrypted with dedicated keys, with GDPR compliance included.
- Per-tenant classes of service — Control what each client can dial (internal, national, international) via classes of service.
- Role-based access — Admins, supervisors and agents, with visibility limited to their own tenant.
- Offline hardware-bound license — Licensing bound to the appliance, with an anti-cloning device fingerprint.
- Open standards — SIP and WebRTC: clients keep their carriers, numbers and compliant phones.
The bottom line
Isolation enforced in the database, not at the application layer — host many clients on one appliance, each fully separate.
Frequently asked
Multi-tenant & resellers
What is a multi-tenant phone system?
A single system that hosts several fully isolated organizations (tenants), each with their own configuration and data. A reseller or MSP can serve many clients from one appliance.
How is isolation between clients guaranteed?
Through row-level security in PostgreSQL: every row of data is tied to a tenant, and the database enforces separation at the engine level, not through code filtering. A client cannot access another's data.
Can I administer each client separately?
Yes. Each tenant has its own configuration, numbers, extensions, queues, agents and recordings, administered independently, with role-based access limited to their own tenant.
Is it suitable for resellers and MSPs?
Yes — it's designed exactly for that. You host many organizations on one appliance, with reduced cost and operating surface per client, each fully isolated.
Are recordings separate per client?
Yes. Recording is per-tenant, encrypted with dedicated keys, with GDPR compliance (consent, opt-out, audit) — one client's data never mixes with another's.
Can clients use their own carriers and numbers?
Yes. Pentacomm uses standard SIP and WebRTC, so each client keeps their trunks, numbers and compliant phones.
Hosting telephony for your clients?
Talk to us about a multi-tenant proof-of-concept or about early pilot access — we'll show you what per-tenant isolation and per-client administration look like.
Contact us for early access