Multi-Tenant Core
Strict separation between businesses, their data and their access rights.
Pre-Launch · Core SaaS platform implemented · production hardening in progress2026
BusinessSite RC
Multi-Tenant SaaS & White-Label Platform
My role
Product concept · Product architecture · UX/product flows · Frontend · Backend/API · Database architecture
Multi-tenancy · Authorization/security · Billing · Applied AI · Testing · Operations design
01
Project overview
Local businesses often need disconnected systems for their website, content, administration, customer access, subscriptions, domains and business configuration. That creates avoidable handoffs and inconsistent workflows.
BusinessSite RC brings those responsibilities into one configurable multi-tenant platform: from business setup and branded website output to subscriptions, domains and ongoing administration.
The core platform is complete. Final QA and template visual polish remain before commercial launch. The project does not claim live customers, commercial launch, unrestricted production billing, or a fully production-proven custom-domain lifecycle.
02
Platform architecture
Website & White-Label Engine
Configurable branded websites built from reusable template and theme contracts.
Customer & Admin Control
Separate owner, site-admin and customer-facing boundaries.
Billing
Stripe checkout, webhook processing and subscription-aware capabilities.
Domains
Slug/subdomain identity plus a controlled custom-domain lifecycle.
Applied AI
Schema-validated, permission-gated operations rather than uncontrolled generation.
03
Customer journey
Business Setup
Business context and permissions
Website / Template
Layout and theme foundation
Branding & Content
Brand, content and catalog context
Services / Configuration
Offer and operating settings
Subscription
Capability-aware subscription state
Domain
Slug, subdomain or custom domain
Customer/Admin Panel
Role-specific administration
Ongoing Management
Controlled maintenance and evolution
04
White-label & template engine
67+ configurable template variants across reusable layout and theme systems
Studio
Observed layout family in the current catalog.
Forge
Observed layout family in the current catalog.
Clarity
Observed layout family in the current catalog.
The template catalog is technically broad, not a claim that every entry is a wholly unique visual design. Greater visual differentiation between sectors and templates is part of the current polish focus.
05
Tenant isolation & access control
Data and route responsibility are deliberately separated by tenant and role. This is an engineering decision, not a blanket security claim.
67
Database tables
64
FORCE-RLS protected tables
3
Owner, site-admin and public boundaries
Tenant-bound
Media and data access
Role and capability checks, tenant-bound media access, webhook verification, and privacy/deletion workflows complement the database boundaries.
06
Billing & controlled AI
Stripe billing architecture
Stripe checkout, webhook signature and event processing, subscription-lifecycle logic and idempotency protections are implemented.
Validated in controlled test flows; no claim is made about real-customer production billing.
Controlled AI capability
Provider abstraction, structured JSON/schema outputs, validation, and authenticated capability-gated routes make AI a controlled product capability.
It is not presented as an unrestricted chatbot or autonomous automation.
07
Engineering evidence
Compact signals of the technical depth in the current pre-launch implementation.
66
Database migrations
67
Database tables
64
FORCE-RLS protected tables
67+
Template variants
450 / 450
Web tests passed in latest audit
Next.js 16
React 19 · PostgreSQL
08
Operational readiness
Monitoring primitives, heartbeat and alert routes, scheduled and cleanup interfaces, deployment guardrails, rollback runbooks, and privacy-lifecycle controls are designed into the architecture. Provider-level monitoring, backup and disaster-recovery activation, and production validation of the custom-domain lifecycle remain explicit pre-launch gates.
Pre-Launch
Current stage
Core platform functionality is complete; final QA and template visual polish remain. This is a pre-launch product and is not presented as a live-customer or commercially operating service.
- Template visual diversification and polish
- Final cross-browser QA
- Custom-domain provider validation and provider-level operations activation
- Commercial and legal activation
09
Technology stack
Application
- Next.js 16
- React 19
- TypeScript
- Node.js
Data & access
- PostgreSQL
- RLS
- FORCE RLS
- RBAC
Platform
- Multi-tenancy
- White-label architecture
- Custom domains
- Vercel
Services
- Stripe
- Webhooks
- AI provider abstraction
- QA checks
10
What this project demonstrates
BusinessSite RC demonstrates full-cycle ownership of a technically mature pre-launch SaaS product: product definition, architecture, frontend, backend, database design, authorization, billing, AI integration, quality controls and operations design.
Need a similar system?
I can design and build a solution around your workflow, team, and business goals.
03
System architecture
Multi-Tenant Core
Tenant isolation · Roles · Capabilities
Website Engine
Templates · Themes · White-label output
Business Control
Customer administration · Domains · Billing
Controlled Services
Stripe · AI · Privacy · QA
04
Project status
Built
- Tenant-isolated architecture
- White-label template and theme contracts
- Owner, site-admin and customer boundaries
- Stripe checkout and webhook processing
- Structured, permission-gated AI operations
- Privacy and quality-control workflows
In active development
- Template visual diversification and polish
- Final browser and provider validation
- Commercial and legal activation
Planned
- Final production operations validation
- Broader integrations where they add product value
05
Engineering decisions
Why multi-tenancy at the core?
Customer, site-admin and owner responsibilities are separated from the start, so data access and product capabilities remain bound to the correct business context.
Why controlled AI operations?
AI features use schema-validated outputs and permission-gated application paths rather than unrestricted generation or autonomous changes.
Why qualify the launch status?
Core implementation is complete, while provider-level validation, visual template polish and commercial activation remain deliberate pre-launch gates.
06
Challenges solved
- 01Keeping tenant isolation consistent across application, media and data access
- 02Turning reusable templates into brand-aware website output
- 03Connecting subscription state to product capabilities
- 04Designing operational readiness before commercial launch
07
Technology stack
Application
- Next.js 16
- React 19
- TypeScript
- Node.js
Data & access
- PostgreSQL
- RLS
- FORCE RLS
- RBAC
Platform
- Multi-tenancy
- White-label architecture
- Custom domains
- Vercel
Services
- Stripe
- Webhooks
- AI provider abstraction
- QA checks
08
What it demonstrates
BusinessSite RC demonstrates full-cycle ownership of a technically mature pre-launch SaaS product: product definition, architecture, frontend, backend, database design, authorization, billing, AI integration, quality controls and operations design.
Need a similar system?
I can design and build a solution around your workflow, team, and business goals.