Multi-tenancy requires absolute security isolation and extremely flexible RBAC role definitions. We describe the database logic built into EthicsHRMS, showing how multiple corporate clients synchronize their respective employee punch cards and payroll registers securely under one server array.