In a traditional Software as a Service (Saas) environment, each customer has its own copy of software, such as human resources (HR) software for each HR department of different corporate customers. By providing each corporate customer its own HR software copy, sensitive customer data accessed by the HR software is not shared by the corporate customers. However, each software copy consumes computing system resources and system administration resources. If there are thousands of customers, each software copy consumes many more computing system and system administration resources. Scaling to millions of customers further exacerbates the total cost in maintaining the SaaS environment. Accordingly, to alleviate such costs, a SaaS environment should provide a single copy of the software to multiple customers while also preventing sensitive data sharing between the multiple customers.