SaaS accounts before features

The first product decision is which records belong to an account, not which chart to draw.

The tenant is a column and a rule

Every customer-owned row needs an account id, and every query needs to use it. A missing filter is a data leak, not a bug ticket for later.

Start with two roles if that matches the work. A matrix of twenty permissions on day one is a product nobody can explain.

You can design the account boundary before you charge anyone. Charging does not fix a missing boundary.

Loading article…

Delivery · June 15, 2026 · Gynvix · 1 min read

The first product decision is which records belong to an account, not which chart to draw.

Every customer-owned row needs an account id, and every query needs to use it. A missing filter is a data leak, not a bug ticket for later.

Start with two roles if that matches the work. A matrix of twenty permissions on day one is a product nobody can explain.

You can design the account boundary before you charge anyone. Charging does not fix a missing boundary.