> ## Documentation Index
> Fetch the complete documentation index at: https://docs.nevatal.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Multi-Tenancy

> How Nevatal isolates data across clinics

# Multi-Tenancy

Nevatal is a multi-tenant platform. Every API key is bound to a specific clinic, and all operations are automatically scoped to that clinic's data.

## How it works

When you authenticate with your API key:

1. The API identifies your clinic from the key
2. All queries are automatically filtered to your clinic's data
3. All writes are associated with your clinic
4. You cannot access data from other clinics

This means you never need to pass a `clinicId` parameter — it's inferred from your authentication context.

## Locations within a clinic

A single clinic can have multiple **locations** (branches). Some resources, like appointments and stock, are scoped to a specific location. Use the `locationId` parameter when working with location-specific data.

```bash theme={null}
# List appointments at a specific location
curl -X GET "https://api.nevatal.com/api/v1/appointments?locationId=loc_main" \
  -H "Authorization: Bearer nvtl_your_api_key"
```