How is our data kept apart from other organizations'?

By PostgreSQL row-level security, enforced on every table that holds an organization's data. The application connects with a role that cannot bypass it, and the isolation is tested against a real database in every release.