Client projectIn development
Sensitive records platform
A back office for sensitive personal data, where who can see what matters as much as any feature.
- Access control lives in the database: permissions are granted per record and per person, and Postgres row-level security enforces them even if the UI has a bug.
- Nothing disappears: signed entries are immutable, and every change and every read is written to an audit log.
- Permissions are tested, not assumed: the permission matrix and every RLS policy run against a real Postgres in CI.
- Next.js
- TypeScript
- PostgreSQL
- Supabase
- Mantine
- Zod
- Vitest