All projects

Flagship / Engineering case study

Active development

EkaVio.

Multi-Tenant SMB Operations Platform

Building the foundations behind connected business operations: organizations, branches, people and the permissions that bring them together.

Role

Personal project · Full-stack development

Category

Full-stack

Status

Active development

Under the surface

Clear boundaries.
Connected operations.

A React/Vite client, an Express/TypeScript API and distinct responsibilities for each data store.

EkaVio Architecture overview
OrganizationPeople. Branches. Operations.
Identity & accessSessions · Memberships · RBACAPI
PostgreSQLIdentity & commercial authority
MongoDBOperational domains
QueueInventoryLedgerAttendance

Tenant-aware by design.

01

The problem

Small and medium businesses need to manage queues, inventory, ledgers and attendance while keeping each organization’s people and data in the right context. EkaVio brings these operational domains into a shared platform with explicit tenant and branch boundaries.

02

Designed for organizations and branches

An organization can have multiple branches and members. Access is resolved through active membership and branch assignments. Selecting an organization or branch requests a context; the server decides whether that context is allowed.

03

Sessions that can be revoked

Refresh credentials travel in HttpOnly cookies. Access JWTs stay in browser memory, while server-side sessions make revocation possible. Protected HTTP requests and realtime connections validate the session and resolve membership before granting access.

  • HttpOnly refresh cookies
  • In-memory access JWTs
  • Revocable server-side sessions
  • Server-validated organization and branch context
04

Permissions and entitlements

RBAC answers what a member may do. Commercial entitlements answer which capabilities an organization has. Keeping these decisions separate lets protected operations check the member’s permission alongside the organization’s module access.

05

Two stores, clear responsibilities

PostgreSQL is the authority for identity, sessions, authorization and commercial data. MongoDB holds operational records for domains such as queue, inventory, ledger and attendance. Migration and cutover tooling support the transition without treating operational data as identity authority.

06

Realtime with tenant context

Socket.IO supports realtime communication. Context switching reconnects the transport after the server validates the selected organization and branch, so the realtime connection follows the active membership context.

07

A repeatable development foundation

Docker Compose brings services together with health checks. Repeatable lint, typecheck, test and build gates support development, alongside PostgreSQL migration and cutover verification tooling.

08

Where it stands

EkaVio is in active development. The current focus is a dependable engineering foundation for multi-tenant operations. The repository documents the implementation and ongoing work.

Next projectCodisify Devlearn

Have something in mind?

Let’s build something
that works.

Let’s talk