Platform owner portal
Separate trust boundary from customer organisation workspaces (/app/). Manage fictional customer setup previews only — not day-to-day care records.
Preview only. No portal login POST, no admin session from a form, no database queries, no customer workspace access, and no billing or email integrations.
Platform settings & site content
Global flags and public marketing content — read-only previews.
Platform flags (sample)
- Maintenance mode — —
- Internal preview host — —
- Customer workspace guard — —
Public site preview
Public site content (read-only CMS preview)
- Homepage hero —
- Demo page —
- Pricing / FAQ / contact —
- Full CMS preview —
Customer workspace URLs (preview explanation)
- Illustrative slug oakview-care
- Future path pattern /workspace/{slug}/ (not routed on preview host)
- Current preview /app/ with demo or customer session (separate from portal)
- Tenant model Same codebase — organisation settings scoped after auth (future)
Customer management safety (read-only)
- No live customers on this host
- No database writes from the portal
- No billing or payment processing
- No invite emails sent
- No workspace activation or live tenants
- No customer data access from portal screens
- No app impersonation or login-as-customer paths