How environments stay separated
What separates your environment from everyone else's.
Your environment shares physical infrastructure with other customers unless you have contracted dedicated capacity. This page explains what keeps them apart, so you can judge whether that is enough for what you want to run.
The short version: you never get direct infrastructure access. Everything you do goes through the portal, the platform API, or Git, and each of those checks what your account is allowed to do before anything happens.
What separates you from everyone else
| Layer | What it does |
|---|---|
| Sign-in | Your access is tied to your organization. You cannot see or act on another organization's applications. |
| Portal and API | Every action is checked against your permissions, your plan, and your limits before it runs. |
| Namespace | Your workloads run in namespaces that belong to you, and resources are attributed to them. |
| Network | What your application may reach, and what may reach it, follows the rules set for your environment. |
| Secrets | Secret values never go into Git. They are stored separately and referenced by name. |
| Capacity | Compute and storage are shared by default, or reserved for you if your contract says so. |
Shared and dedicated capacity
Shared means your applications run on common platform capacity, separated by the layers above. This is the default and is appropriate for most workloads.
Dedicated means capacity is reserved for you alone. It is a contractual arrangement, and what exactly is reserved (compute, storage, network path, or all three) varies. If you need it, agree the specifics with us; do not assume a general definition applies to your case.
Leaving gh0stcloud
What you take with you depends on what you own and what we operate for you. Your Git repository and its history are yours throughout. Persistent data, credentials, and managed services each need their own handover, and those are the parts that need planning.
Agree your exit path with us before you move production onto the platform, not when you want to leave. Applications that use managed services are rarely reproducible elsewhere from documentation alone.