Every audit entry is scoped to the organization whose data was acted upon. The tenantId is what enforces that boundary: when you review the audit trail, Relic filters by your tenant so you only ever see your own organization's history, never anyone else's. It is set automatically when the entry is written — the same value carried by the entity that was changed — so you never enter it by hand. It is also part of the entry's indexes, which is what makes per-tenant audit queries fast even as the log grows.
Technical section
Data model, API, and internals — visible to developers.