There are many different ways to handle data separation and isolation when it comes to multitenancy, each with their own trade-offs. There's also a very common misconception that to achieve multitenancy, each tenant must have its own database. Not only is that not true, it's also often not the best approach.