Multitenant-aware protection service

In a computing environment a data protection system, the system comprising:

• a data store, wherein the data store comprises sub-data stores, one for each tenant among a plurality of tenants, wherein a tenant is defined as an entity among a plurality of entities, and where a single data protection service provides data protection services to all tenants in the plurality of tenants, wherein each sub-data store is accessible by using a unique key corresponding to the sub-data store;
• a provisioning system configured to provision tenants among the plurality of tenants managed by a single data protection service;
• and
• a front end system coupled to the provisioning system, wherein the front end system is configured to store encryption keys used to decrypt the tenants' data at the data store, and wherein each encryption key is specific to a given tenant and thus cannot be used to decrypt other tenants' data at the data store from among the plurality of tenants, but rather wherein each tenant in the plurality of tenants is associated with an encryption key, not usable by other tenants, used at the data store to decrypt data on a tenant and corresponding key basis.