Every vendor is isolated from every other, and inside a vendor’s account every customer tenant has its own policy, meter and report.
Under the Embedded License, isolation works at two levels.
Tokens, cost and rework are metered on every request and rolled up by customer tenant, AI product and provider. The same meter tells a vendor what each customer costs to serve.
Every call is billed to the vendor's own provider accounts. Keys pass through and are never stored. See the Embedded License.