Is all data scoped to my organization?

Yes. Formisoft is multi-tenant with strict organization isolation:

• Every record - patients, forms, submissions, appointments, documents, workflows, audit logs - is scoped by organization ID
• Team members only see data belonging to their organization
• No cross-organization data access
• Enforced at the database query level, not just the UI