Use different subdomain for each company, erpnext is built for that from ground up you don’t have to worry about another company data been visible to others.
And no you don’t have to duplicate droplets just enable multi tenant on your bench configuration