One platform. Every tenant isolated. Agents included.
openbis.tech is a multi-tenant business-intelligence platform. Each tenant gets a branded portal, a governed warehouse, and AI agents — all fenced apart at the database.
Branded portals
Each tenant's shell carries their brand — logo, palette, copy. Set it on the appearance page; the change is theirs alone.
Row-level isolation
Every tenant's rows are fenced by row-level security in the database. Isolation is enforced below the query, so it holds no matter what the code above does.
Additive warehouse
Slotted dimensions and closed-shape facts make the warehouse additive by construction — schema changes never break rollback safety.
Governed agents
Agents authenticate, hold scopes, and reach the same tRPC and MCP surfaces people use. Anything a person can be authorised to do, an agent can too.
Living documents
Wiki docs, level maps, marketing pages, and blog posts share one directive-validated authoring model with public, tenant, and private visibility.
Enforced architecture
Every rule lives in a manifest and is checked by lints and generators, so the platform stays coherent as it grows.
How isolation works
Tenant isolation is not a coding convention you have to remember on every query — it is a property of the system, enforced at each layer.
Isolation, layer by layer
This diagram renders when the document is published.
Isolation is fail-closed
When a read needs data with no public row-level-security branch, the platform makes a momentary, scoped hop and restores the prior scope in a finally block. Nothing stays open. The default is always deny.
Agents are first-class operators
openbis.tech treats AI agents as governed actors. An agent is a session tagged as an agent — it runs through the same permission ladder as a person, so the platform governs it the same way. Tenants define their own agents, hold their own credentials, and grant their own access.
| Aspect | A person | An agent |
|---|---|---|
| Identity | Authenticated session | Authenticated session tagged actor:agent |
| Authorisation | Roles and permission scopes | The same roles and permission scopes |
| Surface | tRPC and the web UI | tRPC and the MCP server |
| Audit | Every action attributed | Every action attributed |