An organisation is your own space on Hermetry. The API and some technical screens call it a tenant or a workspace. Everything you create belongs to it: devices, profiles, dashboards, drawings, flows, rules, members, settings and the audit log. This page explains how organisations are separated, how they are named and reached, and what each status means.
Isolation
Organisations are isolated from each other in the database itself. Every table that holds organisation data carries a row-level security policy, so a query made for one organisation cannot read another organisation’s rows, whatever the application asks for. On top of that:
- A device belongs to exactly one organisation. It never receives another device’s messages, and never another organisation’s.
- Members, roles and groups are per organisation. The same person can be an Owner in one organisation and a User in another.
- Settings are per organisation. A few values are set by the platform for everyone; see Organisation settings and setting levels.
See How Hermetry protects your data for the full picture.
Name, address and region
| Item | Rules |
|---|---|
| Organization Name | Shown in the app, in e-mails and on the sign-in pages. Change it under Settings > General. |
| Address (slug) | One DNS label of 5 to 63 lowercase letters, digits and hyphens, with no hyphen at either end. It gives you the free address <slug>.<platform domain>. Reserved names (such as admin, www, api, auth, app, sso, mail, status, system, root, and environment words such as dev, test, staging, demo) cannot be used. |
| Home region | Chosen when the organisation is created: the European Union, the United States or Türkiye. All of the organisation’s data lives there. See Regions and data residency. |
The free address always works, on every plan, and cannot be removed. You can add a custom domain on top; see Web addresses and custom domains.
Belonging to several organisations
One account can be a member of several organisations. After sign-in you pick the organisation to work in, and you can switch from the organisation picker later. Each membership has its own role, its own groups and its own status. A session signed in to one organisation does not carry rights into another.
People who sign up on the platform can open organisations of their own. The platform limits how many organisations one person may open this way; organisations Hermetry creates for you do not count.
Organisation status
| Status | Effect |
|---|---|
| Active | Normal use. |
| Suspended | Out of service. Every open session of the organisation ends at once. Devices are disconnected and refused at login (MQTT CONNACK 5, HTTP 403); their messages are not processed. |
| Archived | New sign-ins stop until the organisation is set active again. Its data is kept and it is not deleted. |
| Scheduled for deletion | The organisation is read-only and devices are refused, until the deletion runs or is cancelled. |
Suspension and archiving are done by Hermetry, for example when a contract ends. Deletion can be requested by an Owner or by Hermetry.
Deleting an organisation
Deletion has a grace period, so a mistake can be undone:
- An Owner schedules the deletion under Settings > Danger Zone > Delete Organization. The owners are notified.
- For 30 days the organisation is read-only and the deletion can be cancelled with Cancel deletion.
- After the grace period the organisation and all of its data (members, settings, devices, telemetry, dashboards, flows, subscription history and files) are purged. This cannot be undone.
Files that the law requires Hermetry to keep for longer, such as issued invoices, are deleted only when their retention ends. A deletion scheduled by Hermetry can only be cancelled by Hermetry.
Before you delete, export what you need. See Export your data and close your organisation.
Plans and limits
Your plan decides which modules your organisation has and sets limits such as devices, monthly messages, telemetry keys, flows and members. Plan & Billing shows your plan; Usage shows where you stand. Going over the monthly message allowance never stops your devices. See Plans and the IoT add-on and Usage and quotas.
Planned maintenance
Hermetry can schedule maintenance windows. During a window the app may be read-only (pages open, changes are refused) or unavailable, and it answers with a maintenance page. The sign-in pages and the status page stay reachable. Maintenance does not change your organisation’s status.