Flagship / Engineering case study
Active developmentEkaVio.
Multi-Tenant SMB Operations Platform
Building the foundations behind connected business operations: organizations, branches, people and the permissions that bring them together.
Personal project · Full-stack development
Full-stack
Active development
Under the surface
Clear boundaries.
Connected operations.
A React/Vite client, an Express/TypeScript API and distinct responsibilities for each data store.
Tenant-aware by design.
The problem
Small and medium businesses need to manage queues, inventory, ledgers and attendance while keeping each organization’s people and data in the right context. EkaVio brings these operational domains into a shared platform with explicit tenant and branch boundaries.
Designed for organizations and branches
An organization can have multiple branches and members. Access is resolved through active membership and branch assignments. Selecting an organization or branch requests a context; the server decides whether that context is allowed.
Sessions that can be revoked
Refresh credentials travel in HttpOnly cookies. Access JWTs stay in browser memory, while server-side sessions make revocation possible. Protected HTTP requests and realtime connections validate the session and resolve membership before granting access.
- HttpOnly refresh cookies
- In-memory access JWTs
- Revocable server-side sessions
- Server-validated organization and branch context
Permissions and entitlements
RBAC answers what a member may do. Commercial entitlements answer which capabilities an organization has. Keeping these decisions separate lets protected operations check the member’s permission alongside the organization’s module access.
Two stores, clear responsibilities
PostgreSQL is the authority for identity, sessions, authorization and commercial data. MongoDB holds operational records for domains such as queue, inventory, ledger and attendance. Migration and cutover tooling support the transition without treating operational data as identity authority.
Realtime with tenant context
Socket.IO supports realtime communication. Context switching reconnects the transport after the server validates the selected organization and branch, so the realtime connection follows the active membership context.
A repeatable development foundation
Docker Compose brings services together with health checks. Repeatable lint, typecheck, test and build gates support development, alongside PostgreSQL migration and cutover verification tooling.
Where it stands
EkaVio is in active development. The current focus is a dependable engineering foundation for multi-tenant operations. The repository documents the implementation and ongoing work.
Have something in mind?