A multi-tenant platform with isolation as a first principle
Each organisation's data, users, settings and files are separated, and tenant identity comes only from the signed-in session.
Updated 2026-10-20
Isolation and control
- Tenant is derived from the session, never from a URL or form field; every query is tenant-scoped.
- Plans with user, loan and storage limits and feature entitlements; trials and billing operations.
- Platform admin: organisation verification, suspension, feature flags, terms acceptance, incidents, access reviews, health checks.
- Encrypted backups, key rotation, support access that the tenant grants and that expires.
Run it your way
Framework-free PHP 8.1+ with MySQL/MariaDB or SQLite; deploys to shared hosting or your own server.
Questions
How is tenant data separated?
Every business table carries a tenant identifier and every request is scoped by the authenticated session. An automated sweep tests that a second organisation cannot open the first organisation's records.