Writing

Things we got wrong, and what we changed

Longer pieces on the problems this platform exists to solve — written for people who have shipped multi-tenant software and know which parts are actually hard.

Access control

Your field-level permissions probably leak through ORDER BY

Field-level permissions that mask the API response do not protect the field. If a caller can still sort, filter or group by it, they can read it back a few requests at a time. We found this in our own API.

Read it

Architecture

The multi-tenant SaaS checklist: six decisions to make now, one to ignore

Seven decisions, what each one costs if you defer it, and the one everyone worries about that turns out not to matter much.

Read it

Comparison

Platform vendor lock-in: what you can actually export

Bubble, Retool, Lovable, Bolt, v0, Supabase and Supero compared on one axis only — what each one hands you on the way out. Including where we come off worse.

Read it

Playbook

The client portal that used to take three months — and what to charge for it now

The four-week build shape, the week-zero questions that win the job, and how to price work that got faster without pricing yourself out of a living.

Read it

More in the documentation, including the architecture solutions and platform guides.