remWERK
A secure, multi-tenant platform where business owners manage their operations, finances, and records — backed by a tamper-proof activity log and full platform oversight, engineered to run lean today and scale horizontally on demand.
remWERK is a secure, multi-tenant business management platform that gives business owners a single place to register their business, maintain their business and personal records, track finances, and manage day-to-day operations — while keeping a complete, tamper-proof history of every action taken. Every business operates in its own isolated tenant, and a dedicated super-admin control plane sits above the platform to audit all activity, block or unblock users and businesses, securely "view as" any user for support, and respond to in-app support messages — all without ever touching a user's password.
01 · The challenge
Real money, real trust, real isolation.
Running a business platform that holds finances is a trust problem before it is a feature problem. Many businesses share one platform, but no business can ever see another's data — isolation has to be airtight. The money has to reconcile exactly: debts, client credit and opening balances can't drift because of floating-point rounding.
And when something goes wrong — a dispute, a mistake, or a support request — there has to be a complete, trustworthy record of what happened that not even the application itself can silently rewrite. All of this has to run cheaply on day one, yet be ready to scale the moment demand arrives.
02 · The platform
Built for owners, overseen by admins.
Each business gets an isolated workspace, while a platform-wide control plane keeps the whole system trustworthy and supportable.
Multi-tenant onboarding
Self-service registration where each owner gets a fully isolated workspace to register and run their business. One platform, many businesses, zero cross-tenant leakage.
Tamper-proof activity log
An append-only, partitioned audit trail captures every meaningful action. The log can't be silently altered — even by the application — so the history of what happened always holds up.
Super-admin oversight
A control plane for platform-wide auditing, blocking and unblocking users and businesses, and a secure "view as user" support tool — all without ever touching a user's password.
Exact financial tracking
Debts, client credit, opening balances and credit resolution computed with exact decimal arithmetic (accurate to three decimal places) rather than error-prone floating-point math, so the numbers always reconcile.
Built-in support messaging
Two-way support messaging between users and platform admins, so requests are handled inside the platform with full context — no separate channel required.
Security by default
argon2id password hashing, Redis-backed sessions, login rate-limiting, and hardened HTTP security headers — HSTS, anti-clickjacking, and MIME-sniffing protection — on by default, everywhere.
Product view
The live product.
remWERK is deployed and running in production. Explore the real app below, or open it in a new tab.
03 · Engineering
Lean today, horizontal tomorrow.
remWERK is a Next.js 15 + TypeScript app with a deliberately stateless, horizontally scalable app tier — all session, rate-limit and cache state lives in Redis, so any instance can serve any request. The audit trail is an append-only, partitioned table protected by database triggers and least-privilege role grants, so the activity log can't be silently altered, even by the app.
Records use time-ordered UUID v7 identifiers for index-friendly, shard-ready data, while pooled database access (PgBouncer / serverless pooling) keeps the system within connection limits under load. Least-privilege database roles separate runtime access from migrations, and exact money math runs on decimal.js. It's built to run cheaply on a single machine today, yet scales horizontally by adding infrastructure rather than rewriting code.
04 · Outcome
A trustworthy platform, live in production.
remWERK ships a complete, multi-tenant business management platform where owners run their operations and finances in an isolated workspace, every action is recorded in a history that can't be silently rewritten, and a super-admin control plane keeps the whole system auditable and supportable.
With bank-grade security defaults, exact decimal bookkeeping and a stateless architecture that scales by adding infrastructure, it's a platform that holds up where it matters — at the intersection of real money and complete, tamper-proof trust.
Have a platform like this in mind?
Well begun is half done.
Free consultation · No commitment required · Response within 24h · Global availability