Orbit
Permissions, audit log and tenant isolation
- Roles scoped per company, resolved from the org tree at request time
- An append-only audit log, saved in the same transaction as the change it records
- Row-level security forced on every company table
- Fonts self-hosted for faster, private loading