Best of

Best-of guides

We write these knowing which kit we sell, so here is the criterion that matters more than the ranking: check the four things below yourself. Any kit that skips them is a kit you will be rewriting in month three.

The four things worth checking

1. Multi-tenancy

Organizations, memberships and per-request tenant context — not a `user_id` column and a hopeful `WHERE` clause.

2. Role-based access control

Roles enforced server-side, with a hierarchy a reader can hold in their head. Client-side role checks are not RBAC.

3. Seat billing

A billing seam you can point at a merchant of record, with the invite-accept step charging correctly.

4. Audit logging

Append-only by construction — no update path, no delete path — and actually wired to the operations that matter.

The guides

Where to go instead