A group running several brands needs each brand to keep its own customer data, campaigns, and user access. Standing up separate infrastructure per brand is not the answer. Insider One handles this by giving each brand its own account on shared platform infrastructure.
This article explains what stays separate per brand and what the group can see across brands. It also covers where a cross-brand requirement needs scoping with the Insider One team.
This article covers:
What each brand keeps to itself
Each brand runs in its own account, identified by a Partner Name and Partner ID that you set in Settings > Account Settings. See Account Settings.
Layer | Separate per brand | Notes |
|---|---|---|
Customer data | Yes | Profiles, events, and segments belong to one account |
Campaigns and journeys | Yes | Built and run inside the account |
User access and roles | Yes | Roles, product restrictions, and PII access are set per account |
Platform infrastructure | No | Shared across all accounts |
User access is controlled through the six InOne roles, described in User Management. Within an account, Group Management narrows which campaigns and analytics a team can see, covered in Group Management.
To restrict panel access to approved email domains, see User Domain Whitelisting. For central identity management, Insider One supports SAML 2.0 single sign-on and SCIM provisioning, described in Single Sign-On (SSO).
Customer-level data segregation
Customer-level data segregation keeps an organization's data separate from that of other Insider One customers. Here, "customer" means an organization using Insider One, not an individual consumer in a customer profile. Insider One uses segregated databases for each customer and assigns each customer a unique client-side JavaScript snippet to keep data collected on its properties separate from other customers' data.
This is a separate layer from the account model described above, which defines how each brand keeps its own data, campaigns, and access controls. Segregated data does not mean separate infrastructure: all customers run on the shared Insider One platform, so a brand does not need its own deployment. For more detail, see Security Principles for Integrating with Insider One.
What the group shares
Every account runs on the same platform, so a new brand onboards into a new account rather than a new deployment. Channels, AI features, and integrations are available to every account, subject to the setup each one requires.
Frequency capping is configured per channel inside a single account. See Advanced Settings and Email Channel Frequency Capping.
Reporting across brands
To see performance across every brand, pull metrics from each account through the Insider One APIs. Aggregate them in your own reporting or business intelligence tool. Each account's API credentials are managed in Settings > Integration Settings, described in Integration Settings.
You can also query Insider One analytics through the Insider One MCP server, described in Insider One MCP.
Cross-brand coordination
Some group requirements need brands to behave consistently. A shared frequency cap across every brand a customer hears from is one example. Keeping two brands from sending the same customer competing offers on one day is another.
Insider One does not enforce these across accounts out of the box. A group-level rule of this kind is an implementation pattern built on top of the platform, and the Insider One team scopes it with you. Raise it during implementation planning rather than after launch, because the design affects how each brand's campaigns are built.
What to do next
Each brand gets its own account with its own data, campaigns, and access control, while the group gets visibility by aggregating through the APIs. Decide early which controls genuinely need to operate across brands, since those are the ones that need scoping.