Enterprise Governance.Without the Enterprise Tax.
SAML SSO, SCIM 2.0 provisioning, PostgreSQL database-level isolation, and Append-Only Audit trails included on all paid tiers. Architected for rigorous InfoSec and compliance scrutiny.
Six Pillars of Enterprise Readiness
Production-implemented architecture ready for your CISO review today.
True Zero SSO Tax
SAML 2.0 and OIDC single sign-on (Okta, Azure AD Entra ID, PingIdentity) included in the published plans. No arbitrary enterprise toll.
SCIM 2.0 Automated User Sync
Automate user lifecycle management directly from your identity provider. Real-time attribute sync and instant offboarding upon employee exit.
PostgreSQL Row-Level Security
Data isolation enforced at the database engine level via tenant_id RLS policies. Zero risk of cross-organisation exposure even in application bugs.
Fine-Grained Permissions and Custom Roles
Pre-built and custom security roles separating instructors, authors, managers, finance and IT administrators; every administrator holds only the permission keys their role bundles carry.
Append-Only Audit Trail & SIEM Push
Structured actor, action, timestamp, IP, and diff logging with live CSV/JSON export and automated HMAC streaming to Splunk, Sentinel, or Datadog.
Auditable AI Gateway & BYOK
Centralized model broker with prompt injection guardrails, PII masking, exact per-action token metering, and Bring-Your-Own-Key support.
Database Isolation & Emergency Access Governance
Legacy LMS platforms rely on shared application queries and vendor support super-tokens. Personal Academy enforces database-level boundaries and auditable break-glass sessions.
PostgreSQL Kernel RLS
- Every database table contains an immutable tenant_id UUID foreign key.
- Postgres AS RESTRICTIVE policies validate JWT organisation context before executing queries.
- Dedicated subdomains (e.g. acme.personalacademy.app) route traffic securely.
Break-Glass Staff Sessions
- Platform staff have zero standing access to customer data or learner submissions.
- Emergency support requires explicit, time-bounded platform_access_sessions tokens.
- Each break-glass session needs a stated reason, expires automatically and is attributed to the named staff member in the audit log.