Client Workspace • Acme Corp
Organizations
RLS
No accessible rows or permission denied
Assessments
RLS
No accessible rows or permission denied
Tasks
RLS
No accessible rows or permission denied
Evidence
RLS
No accessible rows or permission denied
Audit Logs
RLS
No accessible rows or permission denied
AI Conversations
RLS
No accessible rows or permission denied

Launch Controls

A compact checklist for production operators.

Supabase AuthMagic-link auth is handled through Supabase browser/server clients.
Configured
Tenant IsolationOrganization data is protected by RLS and tenant membership checks.
Enabled
Advisor AccessAdvisors can only access organizations through active advisor-client access records.
Explicit assignment
Server-side OpenAIOpenAI requests are made only from Next.js API routes.
Configured
Audit LoggingDatabase triggers and API inserts log user, advisor, and AI workflow actions.
Enabled