Organization

The multi-tenant container. Defined at src/Core/AdminConsole/Entities/Organization.cs (~12 KB) and persisted to dbo.Organization.

Important columns

Column	Notes
Id (Guid)	Primary key.
Name, BusinessName, BusinessAddress*, BusinessTaxNumber, BillingEmail, BusinessCountry	Business profile.
Plan, PlanType	Plan name + enum. Use StaticStore to look up rates / seats.
Seats, MaxCollections, MaxStorageGb, Storage	Capacity.
UseGroups, UseDirectory, UseEvents, UseTotp, Use2fa, UseApi, UseResetPassword, UsePolicies, UseSso, UseScim, UseKeyConnector, UseSecretsManager, UsePasswordManager, UseCustomPermissions, UseOrganizationDomains	Per-feature toggles, derived from plan + add-ons.
SelfHost	Whether this is a self-hosted org installation.
UsersGetPremium	Free Premium for org members.
Identifier	Optional human-friendly id used for Public-API URLs.
Status	Pending, Created.
OwnersNotifiedOfAutoscaling	Subscription autoscaling notification state.
Enabled	Master switch.
LicenseKey	Self-host license id.
ApiKey	Org-bearer API key (deprecated; replaced by OrganizationApiKey).
PublicKey, PrivateKey	Org key pair (used for sharing / reset password).
TwoFactorProviders	Org-bound 2FA settings.
ExpirationDate	License / subscription end.
MaxAutoscaleSeats, MaxAutoscaleSmSeats, ...	Soft caps on autoscaling.
OwnersAdminCanReadCipherCount, LimitItemDeletion, LimitCollectionCreation, LimitCollectionDeletion, AllowAdminAccessToAllCollectionItems	Collection-management toggles.
RevisionDate, CreationDate	Audit timestamps.

Lifecycle

• Sign up → OrganizationService.SignUpAsync (or OrganizationFactory for newer flows). Creates Stripe customer + subscription, inserts Organization, makes the creator an Owner OrganizationUser.
• Plan change → IPaymentService.AdjustSeats / ChangePlanAsync. Stripe state mutates first, DB second.
• Disable / Enable → toggles Enabled. The OrganizationAbility cache is updated cluster-wide via the Service Bus topic.
• Self-host activate → upload OrganizationLicense; validated against licensing.cer.
• Delete → soft-delete pattern; ciphers and members are cleaned up via cascades and a Quartz cleanup job.

Related entities

• OrganizationUser — membership (User ↔ Org with role + status).
• Group / GroupUser — role groupings.
• Collection / CollectionUser / CollectionGroup / CollectionCipher — cipher access graph.
• Policy — org-wide rules.
• OrganizationApiKey — modern, scoped org-bearer API keys.
• OrganizationDomain — verified email domains.
• OrganizationConnection — outbound integrations (HEC / Datadog / etc.).
• OrganizationSponsorship — Families-for-Enterprise sponsorships.
• Provider / ProviderOrganization — MSP that owns this org.

Where it shows up

• Almost every feature page references Organization — start at organizations-and-policies for the broader picture.
• Application cache: OrganizationAbility is a derivative held in-memory per pod; see systems/application-cache.