The isolation is provided by what is commonly referred to as Linux containers (the security portion is comprised of Linux namespaces and capabilities) so the isolation is exactly as good as these kernel features. Please see the article from Docker’s documentation on security. If that’s not good enough for you, contact us because we are capable of running all of your data on dedicated virtual machines or even dedicated hardware if you opt for our enterprise plans. See below.