How did isolated data of each tenant? Did You developed some other logic in the middle were or you just use the query params to check whether a user is attempting to fetch his organization data?