Platform

Many organizations, one honest platform.

Workspaces isolate every event, order, and buyer behind database-enforced boundaries. Run it as shared SaaS, or self-host the same build for a single organization.

Shared platformWorkspace AWorkspace BWorkspace CData isolation

Sound familiar?

One client sees another's data

The career-ending leak. Here, row-level security is enforced with FORCE inside the database. A missing filter in app code cannot cross the boundary.

Roles that lag reality

Permissions baked into a login token stay valid after a demotion. Seatmap resolves permissions per request, so revocation applies to the very next call.

Agencies juggling logins

One identity per client means shared passwords and zero accountability. Here one user belongs to many workspaces and switches without losing context.

Isolation you can prove

01Workspace isolationEvery event, order, and buyer is workspace-scoped and enforced by Postgres RLS. Another workspace's data isn't hidden. It doesn't exist (404).
02Roles & custom permissionsImmutable owner, admin, and member system roles, plus workspace-defined custom roles built from a code-first permission catalog.
03Immediate revocationPermissions resolve per request, not at login. Remove access and the next API call already knows.
04Shared venue master dataVenues stay tenant-owned; sister workspaces read them only when sharing is enabled. Existence is never inferable.
05One identity, many hatsThe same person can staff one workspace and buy from another. Staff and buyer roles coexist cleanly.
06SaaS or self-hostedThe same build runs as multi-workspace cloud SaaS or as a single-organization on-prem install. Your call.

From organization to audit trail

  1. 01Create workspacesEach client, brand, or venue gets an isolated workspace with its own events, orders, and buyers.
  2. 02Invite with rolesEmail invites assign system or custom roles; SSO group mappings can do it automatically.
  3. 03Operate with auditEvery sensitive write lands in an append-only, workspace-scoped audit trail, written atomically with the change itself.

See workspaces in action

Switch between a stadium and a theatre in the live demo.