SOC 2 ready
Control evidence surfaces are wired; buyers own certification.
Your admin command centre
Replace this with your admin product promise.
Access reviewsDSAR exportConsent controlsDeletion windowWebhook verificationAudit logs
ISO 27001 architecture
Access, audit, and incident workflows map to ISMS operations.
GDPR wired
compliance scaffold data export, erasure, consent, and audit scaffolds ship together.
RBAC state
Access control plane
RoleScopeControl
OwnerFull access2 active sessions
Ops AdminUsers + auditInvite required
ReviewerRead-only logsExport disabled
SuspendedBlockedForce logout ready
Pre-flight validation
Unsafe saves blocked
RBAC change requires explicit admin role
Anonymous consent route remains public
Webhook signatures reject unsigned payloads
Deletion sweep writes completion audit rows
Users
Replace with KPI
Sessions
Access controls ready
Exports
Data export route
Isolation
Admin baseline
Operations
Replace this section with the proof your admin product needs.
Use this space for your operational model, data controls, customer evidence, security posture, and launch-readiness notes.
Next.js 16 App Router
PostgreSQL + Drizzle
Zod API validation
Vitest + Playwright
Local Postgres stack
Deployment checklist