Glossary
Tenant Customisation Boundary
The rules for what tenants can customise freely, what needs a sandbox, and what is forbidden.
The Tenant Customisation Boundary sorts customisations into three groups. Allowed (self-serve): custom fields and objects, views, dashboards, branding, automations built from Actions, roles and DoA amounts within platform limits, eval-gated agent prompts, synthetic avatars, certified connectors. Sandboxed: relations to first-party objects, custom components and Action handlers, custom policy rules and evals, real-person likeness with Rights Registry consent, custom connectors. Forbidden: direct database access, bypassing the Action Bus, disabling audit, risk tiers, disclosure or consent checks, unversioned prompt edits in production, and agent permissions beyond the admin's own.
Only Allowed and Sandboxed customisations are covered by the upgrade guarantee.
See how One3 would run your business
Tell us about your team and the outcomes you want. We will walk you through the apps, the Digital Employees and the plan for your industry.