Platform & Security
Secure, multi-tenant infrastructure with white-label customisation.
BizBrew is built with security at every layer. Each business's data is kept separate: the backend checks the business and the user's role on every request and filters every query by it. Direct database access is closed to users, and row-level security is enabled on every table as an extra safeguard. Supabase GoTrue handles authentication, and role-based access control gives you granular permissions. Custom domains with automatic SSL let you use your own brand, a branded iOS and Android app is available as a plan add-on, and webhooks and API keys connect BizBrew to your existing tools.
What's included
Custom domains
Use your own domain with automatic SSL certificate provisioning.
White-label branding
Custom logos, colors, and app name — your brand, your platform.
Multi-tenant architecture
Isolated data and configuration per tenant, shared infrastructure.
Role-based access
Granular permissions for super admins, tenant admins, and staff.
Tenant isolation
Every query filtered by your business in the backend; row-level security enabled on every table as an extra safeguard.
API access
RESTful API for integrations and custom automations.
Custom mobile app
Branded iOS and Android app for your business, available as a plan add-on.
Webhook support
Trigger external systems and automations on key platform events.
Frequently asked questions
How is my data isolated from other tenants?
Every record carries your business ID. The backend confirms you belong to the business on each request and filters every database query by it. Direct database access is closed to users, and row-level security is enabled on every table as an extra safeguard.
Can I use my own domain?
Yes, on the Pro plan. Connect your custom domain and BizBrew automatically provisions and renews SSL certificates. Your customers see your brand, not ours.
Is there an API for custom integrations?
Yes. Create API keys in your workspace (read-only unless you allow writes) to build custom integrations and automations. API documentation is available on request.
What is the branded mobile app add-on?
A branded iOS and Android app published under your business name is available as an add-on. Clients download it from the App Store and Google Play, and it includes online booking, the client portal and push notifications.
How do webhooks work?
Configure webhook endpoints to receive signed POST notifications when events happen in BizBrew — today a new booking, a completed point-of-sale payment and a new membership. Use them to trigger automations in your own systems or any HTTP-capable tool.
Ready to try Platform & Security?
Create your free account and explore every feature — no credit card required.