This website does not use cookies. For more information, please consult our Privacy Policy.

TdA Platform ยท Technology

Built to last.
Designed to grow.

TdA Platform is a multi-tenant cloud application built on open and reliable technologies. Every component is chosen to ensure scalability, security and cost control.

Architecture

How the components are connected

TdA Platform Architecture โ€“ Frontend React/Flutter, Supabase, Node.js Backend on Render, LLM Providers
๐Ÿ–ฅ๏ธ

Frontend

React ยท Next.js ยท Flutter

The web interface is built with React and Next.js. The mobile app uses Flutter. Both connect directly to Supabase for authentication and data.

๐Ÿ—„๏ธ

Supabase

Auth ยท Database ยท Storage

Manages authentication, PostgreSQL database and file storage. Each tenant has its own isolated data via Row Level Security. No tenant's data is accessible to another.

โš™๏ธ

Node.js Backend

Render ยท TypeScript ยท Cron

The backend runs on Render and handles background processes: scheduled jobs, AI processing, IMAP email reading. It is never exposed directly to the browser.

๐Ÿง 

LLM Providers

Per tenant's choice

Each tenant configures their own AI provider. Calls are made with the tenant's credentials โ€” LLM costs are always directly charged to and under the control of the platform user.

Multi-tenancy

Every company is a separate world

The platform is designed to host multiple companies (tenants) on the same infrastructure, keeping data completely separate and isolated. Each company has its own configuration, users and active modules.

๐Ÿ”’

Data isolation

Each tenant sees only their own data. Supabase's Row Level Security mechanism ensures that no query can return data from another tenant, even in the event of application errors.

๐Ÿ‘ฅ

Roles and permissions

Each tenant has users with distinct roles: Admin for full management, Backoffice for daily operations, User for access to enabled modules.

โš™๏ธ

Independent configuration

Each tenant independently configures their own modules, AI providers, email accounts and operational limits. One tenant's settings never affect another's.

Security

Secure access, protected data

Authentication is managed entirely by Supabase, which implements modern security standards. Every session is verified server-side before accessing any data.

  • Email/password authentication managed by Supabase Auth, with future support for Google OAuth.
  • Row Level Security on all critical tables: every query is automatically filtered by tenant.
  • AI credentials never shared: each tenant enters and manages their own API keys for LLM providers.
  • Backend with no direct browser access: the frontend never exposes sensitive endpoints; all critical logic is in the backend on Render.
๐Ÿ”

HTTPS everywhere

All communications between frontend, Supabase and backend occur over HTTPS. No data is transmitted in plaintext.

๐ŸŒ

Managed cloud

Supabase and Render manage security updates, backups and infrastructure availability.

๐Ÿ“‹

Logs and monitoring

Main user actions are tracked with timestamp and user. Errors from the web app, the backend and the mobile app are collected in Sentry (EU region, with personal data masked), and an automatic check reports new errors and stuck jobs to the administrator.

๐Ÿ’ถ

Transparent AI costs

LLM model costs are directly attributable to the tenant that generates them. No hidden AI costs in the platform fee.

AI Integration

You choose the AI provider

Each tenant independently configures their own LLM provider. You can use the model you prefer, change it at any time and keep costs completely under your control โ€” without intermediaries.

Anthropic Claude OpenAI Google Gemini Groq Deepseek
External services

The keys stay yours

Besides AI, the platform relies on other services, such as Openapi for the official data of the Italian Business Register — ATECO code, REA number, legal form, business status. Each service is configured with your company's own credentials: usage is yours, visible on the provider's portal, and the platform is not an intermediary. Keys are stored encrypted and can no longer be read by anyone, not even by us.

Openapi · Business Register IMAP / SMTP

Want to try the platform?

Book 30 minutes: we pick together the modules you need and start from those.

Request the free demo