FEATURES
Everything a production
SaaS needs, wired.
Each capability ships behind a clean port with real tests — not a stub. Explore what the boilerplate does before you clone it.
Authentication
BetterAuth with argon2id, sessions, OAuth, magic-link, and TOTP 2FA with backup codes. Rate limits per IP and per email.
Multi-tenancy
Org workspaces, member invitations, per-tenant API keys, and platform-admin impersonation.
Billing
Stripe, MercadoPago, and Polar adapters behind one payment-provider port. Customer portal, webhook-driven read model.
RBAC
A typed permission matrix, enforced by ESLint across the codebase.
Audit log
An append-only audit trail for every state-changing action across the system.
Webhooks
HMAC-signed outgoing deliveries via BullMQ + Redis, with exponential-backoff retries and a dead-letter queue.
AI streaming
Vercel AI SDK + Anthropic adapter for streaming chat completions — a drop-in base for your own agent or RAG flow.
GDPR
Cookie consent, 30-day-grace account deletion, async data export, and audit-log anonymization.