For growing and multi-site providers

What breaks at the third site, and how not to meet it.

The tool that was fine at fifteen workers usually gives out around eighty, and almost always for the same three reasons: everybody can see everything, the sites cannot really be told apart, and there is no way to get your own data out.

If this is your week

  • Permissions that are really just job titles wearing a lanyard
  • A second site bolted on as a naming convention
  • Reporting that means exporting to a spreadsheet

Roles you invent, enforced as hard as ours

Access is a specific permission to do a specific thing to a specific kind of record — never a job title. You compose your own roles, and the database enforces one you made exactly as strictly as one we shipped. It is not a check in application code that a missed branch can walk straight past.

Sites that are actually separate

Properties, teams and operations are scoped, rather than being distinguished by everyone agreeing to a naming convention. Growing does not have to mean everybody gradually being able to see everything.

One worker, two employers, one login

A support worker who works for you and for somebody else has a single personal login and moves between organisations, instead of signing out and back in twice a day. Each organisation only ever sees its own employment of them.

Your data stays reachable

A REST API sitting behind the same permission model as the screens, and exports that are yours to take whenever you want them. Integrating with something else never requires anyone to hold a key that steps over the boundary between organisations.

Why this one matters here

The separation is enforced by Postgres, not by remembering

Every table carries a boundary the database checks on every read and write, so a query that forgets to scope returns nothing at all rather than somebody else's participants. At three sites that is a nicety. At thirty it is the difference between a platform and a liability.

If some of this is you too.

Most providers are more than one of these, which is exactly why it is one system and not four.

Or read it job by job.

Set it up the way you actually work.

Try it free — up to 5 people