Architecture

Built to Grow With You

Two connected apps, each with one job — one keeps your sign-in safe, the other runs your accounting. Keeping them apart protects your data and keeps things fast as your business grows.

Why two separate applications?

Most systems bundle login and business data into one place. We deliberately split them: a Portal that does nothing but confirm who you are, and a Console that does nothing but your accounting. Neither holds the other's job, so a weakness in one can't expose the other — and each can scale on its own as your business grows.

Architecture

A dual-application design built for growing businesses — separating identity management from business operations, with security and scalability at every layer.

Portal (Identity Provider)
  • Sole authentication provider — no password login in Console
  • User registration, login, and password management
  • Tenant/company registry and membership roles
  • Secure one-time session handoff with expiry and replay prevention
  • Demo mode with password-free role picker for reviewers
Console (Accounting Engine)
  • Full accounting operations scoped to tenant schema
  • GL, AR, AP, Inventory, Bank, Budget, and Reports modules
  • Per-tenant PostgreSQL schema isolation (not row-level filtering)
  • RBAC with 8 roles and 105 granular permissions
  • Independent audit trail with before/after snapshots

Try It Yourself

Explore a fully-seeded demo environment with sample customers, vendors, invoices, bills, inventory, and posted journals. Pick a role and start exploring — no signup required.