Identity and tenants
WorkOS handles authentication and verified identities. The application PostgreSQL owns users, tenants, memberships, sessions and permissions.
Security by architecture
Tenant, identity, permission and audit are part of every operation.
Inttwin uses stable internal UUIDs, tenant memberships, roles and a server-derived RequestContext. Sensitive operations have explicit policies and run under an auditable actor.
Default deny
Every route and agent tool requires an explicit policy. Runtime never trusts a tenant ID, actor name or role supplied by the client.
Defence in depth
Tenant filtering in the service layer is reinforced by PostgreSQL Row-Level Security, private object storage and short-lived authorised links.
Pilot conversation