will there be shared data and customizations between those departments? if yes, then I would stay away from multi-tenant. if no, still not sure it would be the right way to go.
one deployment can be substantially customized and user roles can manage the access each department has at a pretty high level.