Tools
foir
foir is our data platform: a full backend in a box, built for multi-tenant apps. Define your models and you have a database, a typed API for web and mobile, and a CMS for the people who edit content. Every customer organisation is isolated at the database level, from the identity up: operators and end customers, org hierarchies, and per-tenant roles. It comes with hosted OIDC customer auth, an API gateway, realtime, media, search, localisation, notifications, personalisation, secrets, schedules, and webhooks. It runs this site, and it's where our new client work ships. Hand us the build, or build on it yourself.
Demesne
Demesne is our open-source authorization engine. Access rules live in one spec file and compile to Postgres row-level security, with matching permission checks for Go and TypeScript. It's what enforces foir's tenant isolation.