Multi-tenant Exovo
A multi-tenant Exovo system hosts several organizations on one machine. Each tenant is a complete, isolated phone system — its own domain, users, trunks, routing, recordings and settings — while a single machine operator manages the box and the tenants on it. It's built for MSPs and operators who want one server (and one update, one backup schedule, one security posture) serving many customers.
Choosing multi-tenant
The system type is chosen once, in the onboarding wizard, and cannot be changed later. The wizard's first step offers Create a new single system or Create a new multi-tenant system — see installation. A single-organization system carries no tenancy surface at all; everything on this page applies only to a box installed as a multi-tenant host.
A multi-tenant install sets up two things a single system doesn't have:
- The machine operator — a box-level login that manages tenants and machine settings. It's a login only, not a phone extension: it never appears on team pages, never rings, and doesn't count against any tenant's extension limit.
- Tenant 1 — the first phone system on the machine. It's a managed tenant like any you add later, named during onboarding; there's nothing special about it except that it can't be deleted.
What's isolated, what's shared
Everything an organization would call their phone system is per-tenant: extensions and users, groups, trunks and DIDs, inbound/outbound rules, ring groups, queues, IVRs, office hours and holidays, recordings, voicemail, chat, call history, provisioning, and the tenant's own sign-in domain. Tenant admins manage all of it exactly as on a single system — they can't see or touch any other tenant.
A small set of pages configures the machine itself and is editable only by the machine operator (tenant admins don't see them):
| Area | Machine-level pages |
|---|---|
| Connectivity | Network, VPN |
| Security | Secure SIP, Anti-Hacking, IP Blacklist, Certificate Authority, Console Restrictions, Allowed Country Codes |
| Integrations | Syslog |
| Administration | Backup & Restore (the archive contains every tenant's data) |
Domains and sign-in
Each tenant gets its own FQDN — phones provision against it and users sign in at it. Point the DNS name at the machine and Exovo publishes the routing and requests a TLS certificate automatically when the tenant is created; no restarts, no manual proxy work. See creating and managing tenants.
Licensing
The license is per machine, not per tenant: one key, bound to the box's FQDN, covers every tenant on it. Per-tenant extension limits are an administrative cap the operator sets on each tenant (0 = unlimited) — useful for matching what each customer pays for — and are not part of the license itself. See licensing.