Tenant isolation for MENA SaaS: a production review

A customer signs in to the right account, opens an invoice and sees another company's details. The login worked. The tenant boundary did not. For a SaaS team serving customers in Saudi Arabia and the