Tenant isolation
Core records carry tenant ownership so campaigns, queue items, and users remain separated.
Security
Core records carry tenant ownership so campaigns, queue items, and users remain separated.
Approval-first sending is the default, and autonomous mode still preserves a queue record.
Email is designed around Microsoft Graph rather than shared SMTP credentials.
Credits, user seats, package status, and admin adjustments are modeled explicitly.