Peterbilt Atlantic.
A commercial truck dealer group and a simple question nobody could answer the same way twice: when did this customer call, and who picked up? Now every call lands in one record you can cite – and when a second dealership joined the same system, neither can see the other's.

* Not real data. Names, figures and identifiers are invented, and anything under NDA is stripped from the capture.
The phone system knew, in principle. In practice the answer to “they say they called on Tuesday, twice” depended on who you asked and which screen they had open. Call history sat in the provider's portal, per user, for as long as the provider chose to keep it – and it could not be queried across the whole dealership at all.
A pipeline that pulls the call data out of TELUS Business Connect and lands it in a Postgres database the dealership owns, refreshed every six hours. On top of it: daily reports for the people who run the branches, and an MCP server so the record can be asked questions in plain language from the tools the team already uses – every answer cites the call it came from. A second dealership, Extreme Torque Motorsports, later joined the same system, and the two are sealed apart by construction rather than by a filter someone has to remember: each tenant is fixed by the credential it connects with, never by anything in the request, and every lookup is audited. A report cannot accidentally show one dealership the other's calls, because there is no request that could ask for it.
The database is the client's and lives on their side of the line. The provider's API is read, never written to; the phone system is untouched. Between the two dealerships the boundary is the credential: a session only ever sees the tenant it authenticated as.