What I would change
I named it Sonar and built a landing page, an offer and a domain around that name before opening the trademark register. SonarSource owns SONAR for software, so the product became ReplyDeck before it met a single paying customer. A cheap lesson only because it was learned early: the register comes before the domain. The thing I would keep exactly as it is: the tenancy guard with its own test module, because isolation that lives in application code has to be proven, not assumed.