You would add a Company field to both User and Project, then put a privacy rule where This Project's Company is Current User's Company. This means on every creation of a project or any other datatype make sure to fill in the Company.

2 Likes