Multi-tenant SaaS starter

The hard SaaS foundation, done on day one.

Workspaces, roles, tenant isolation, billing and audit logs, tested and ready, so your MVP starts at week three.

Postgres row-level security

Every tenant table is isolated in the database, not just in application code.

Owner, admin and member roles from one permission matrix, enforced on every route.

Checkout, customer portal, idempotent webhooks and server-side plan limits.

Who changed what, when and from where, for every sensitive action.

Users join many workspaces and switch between them instantly.

Platform metrics, suspensions and read-only support impersonation.