Skip to main content
The Encore OS database is Supabase Postgres with strict Row-Level Security (RLS) on every business table. Multi-tenant isolation is enforced at the row level; queries can never accidentally cross tenants because org_id = auth_org_id() predicates are evaluated by the database.

Start here

  • Migration Workflow — from a spec to a deployed table with RLS and tests. Read this first if you’re about to add or change schema.
  • ERDs — entity-relationship diagrams per core.

RLS

  • RLS Patterns — canonical templates (tenant, role-bounded, read/write split).
  • RLS Coverage — gap report against business tables.

Operations