Acyclic Graph Traversal & Zero-Leakage Migration

Move One SaaS Tenant.
With Mathematical Isolation Proof.

Stop writing brittle hand-crafted SQL export scripts. TenantPorter parses your schema DAG, enforces write-freezes, packages records & files into encrypted .tpbundle archives, and verifies zero foreign tenant records leaked.

Try Migration Simulator Explore Tenant Map DSL
✓ PostgreSQL Relational Foreign Keys
✓ S3 / Blob Storage File Bundler
✓ Tarjan Cycle & Kahn Topological Sort
✓ Mathematical Zero Foreign Leakage Proof

Interactive Portability Engine Simulator

Simulate moving a VIP tenant (Acme Corp, ID: tenant_acme_42) out of a shared multi-tenant database to a dedicated private cluster.

tenantporter // dag-engine
STANDBY
// Source DB: multi_tenant_production (12,400 total tenants, 4.2M rows)
// Target Tenant: tenant_acme_42 (Acme Corp Enterprise Plan)
// Destination: dedicated_rds_cluster_us_east_1 (Clean empty target)
// Ready. Click "Execute Tenant Migration" to run extraction & verification.

Topological DAG Order 0 tables

No DAG compiled yet.

Isolation Audit Proof

Bundle: None
Digest (SHA-256): Unsigned
Foreign Records: --

Declarative Portability Architecture

The Tenant Map DSL

Define ownership predicates once. TenantPorter compiles the DAG, verifies foreign keys, and redacts credentials automatically.

1. DIRECT POLICY

Tables containing direct tenant_id column.

tenants:
  policy: root
  key: id

organizations:
  policy: direct
  tenantKey: tenant_id
2. RELATED POLICY

Child tables joined through parent foreign keys without tenant_id.

invoices:
  policy: related
  foreignKey: org_id
  parentTable: organizations
3. SHARED CATALOG

Global reference tables safely copied or referenced at target.

plans:
  policy: shared
  action: copy_catalog
  allowlist: [id, name, tier]

Predictable SaaS Economics

Billed per Migration or Engine Subscription

Customer-operated runner executes on your AWS/GCP account. Zero customer data leaves your boundary.

Migration Pilot
$499 one-time

Single enterprise tenant extraction + dry-run verification with architect review.

  • ✓ Schema DAG compilation
  • ✓ 1 Full tenant export & import
  • ✓ AES-256-GCM encrypted bundle
  • ✓ Isolation compliance certificate
Book Pilot Audit
Recommended
Pro Engine
$149 / month

Self-serve CLI and API for SaaS teams handling recurring enterprise portability.

  • ✓ Up to 10 migrations per month
  • ✓ Automated write-freeze adapter
  • ✓ S3 attachment archive bundler
  • ✓ Full REST API & webhook triggers
  • ✓ Mathematical zero-leakage proof
Start Free Trial
Scale / Enterprise
$499 / month

High-concurrency tenant migration for large multi-tenant platforms.

  • ✓ Unlimited tenant migrations
  • ✓ Parallel worker streaming
  • ✓ Cross-region S3 replication
  • ✓ Dedicated technical architect SLA
Contact Sales

Frequently Asked Questions

How do you prevent circular foreign key deadlocks?

TenantPorter runs Tarjan's strongly connected components algorithm during schema compilation. If circular dependencies exist, it raises a diagnostic error showing the cycle path, allowing engineers to declare nullable deferred foreign key boundaries.

How does TenantPorter guarantee no foreign tenant records leak?

After importing into the destination database, the Portability Verifier executes an exhaustive isolation audit. It scans all imported rows across every table and asserts that 100% of rows contain either the target tenant_id or are approved catalog reference records. If a single foreign ID is found, the transaction is immediately aborted.

Does the source database experience downtime during export?

No. Only the specific tenant being migrated is placed in maintenance mode via the Write Freeze Adapter. All other 12,000+ tenants continue writing and reading without interruption.