Project
One platform that signs companies up, provisions them automatically, and gives each its own portal.
What it is
ToskTech Platform is the SaaS backbone behind tosktech.com: a super-admin portal for running the platform itself, and a separate portal for every company on it, each living on its own subdomain. Companies sign up, get provisioned, and manage their own users, documents, and modules — no manual setup behind the scenes.
Architecture
The backend is a set of focused .NET APIs behind a YARP gateway — auth, identity, users, companies, notifications, configuration, and document management each in their own service. A shared service-defaults library keeps health checks, resilience policies, and telemetry identical across all of them, with PostgreSQL and EF Core underneath and Kubernetes around everything, deployed through Jenkins.
Multi-tenancy and provisioning
Tenancy runs deeper than a company column: every request resolves its company context — which database, which data scope — before touching data, and the per-company portals are fully separated from the super-admin surface. Provisioning is a single flow: creating a company stands up its portal, roles, and storage paths in one pass.
Notable engineering
The parts worth pointing at: JWT auth with refresh tokens and two-factor handled by a dedicated auth service; roles propagated from identity through the gateway into every downstream API; payments and subscriptions abstracted over providers; and object storage on Ceph behind an S3 interface. A React Native mobile app rides the same APIs as the web portals.
Building a multi-tenant product?
The hard parts — identity, tenancy, provisioning, billing — are the parts I enjoy most. Tell me where yours is stuck.