The tenantId on a CoCRecord is automatically set from the parent ChainOfCustody when the record is created. It ensures that when multiple organizations use Piper, each organization only sees its own per-well sample records. You never set this manually — Piper derives it from your authenticated session and the parent CoC document. It is the primary data isolation mechanism protecting your compliance records from being visible to other tenants.
Technical section
Data model, API, and internals — visible to developers.