This frontend
A static application containing no calculation engine and no backend secret. It uses
OIDC Authorization Code with PKCE, refreshes sessions, and polls queued jobs through
the API.
Durable backend jobs
Heavy calculations and all controlled exports run through a queue with a separate
worker service, progress reporting, bounded retries, cancellation and terminal
failure records.
Login and database
Named-user login is issued by the identity server. PostgreSQL stores organisations,
seats, subscriptions, immutable project versions, jobs, exports and audit records.
Payments
Checkout, billing, signed webhooks and the customer portal automate per-seat
subscriptions and entitlement changes.
Operations
Metrics, dashboards, alert rules, structured logs, rate limits, verified backups,
restore tooling and controlled deployment workflows ship with the backend.
Commissioning boundary
Account deployment, alert receivers, live payment and tax approval, identity SMTP and
MFA, load tests, restore drills and independent penetration testing require the
production environment.