SaaS development: multi-tenancy that holds from day one

Soham Dang builds multi-tenant SaaS platforms — one deployment serving many organisations, with data isolation and role-based access enforced structurally. Avani Business OS is the largest: 25+ modules used daily by 10,000+ users.

Multi-tenancy is one of the few architectural decisions that is genuinely expensive to reverse. Retrofitting tenant isolation onto a single-tenant application means touching every query, every route and every index, usually while it is in production.

So it is worth getting right at the start, even when the product has one customer and the abstraction feels premature.

The isolation model

  • One guard, not one per query

    Tenant scoping applied in middleware so every data access inherits it. Isolation becomes a property of the system rather than something each endpoint must remember.

  • Roles as data, not conditionals

    Permissions modelled and checked centrally, so adding a role does not mean auditing every route for missing branches.

  • Indexes that include the tenant

    Compound indexes led by the tenant key, so scoping helps performance rather than costing it.

  • Shared component and permission layers

    New modules compose existing primitives. That is how 25+ modules stay consistent instead of becoming 25 products.

The parts every SaaS eventually needs

Onboarding and org setup. User invitation and role assignment. An audit trail of who changed what. Billing surfaces. Dashboards that aggregate across a tenant's data without ever reaching outside it. Notification delivery. An admin view for support.

Building these late is what causes the second rewrite. Building them into the foundation is cheaper even though it feels slower in month one.

Evidence

Avani Business OS replaced more than ten separate internal tools with one platform: tasks, projects, meetings, leads, expenses, assets, billing, KPIs, finance, email CRM and a full HR suite covering onboarding, leaves, payroll, salary slips, team performance and HR analytics.

It runs on React.js, Node.js, Express.js and MongoDB with multi-tenant RBAC, and includes an AI layer built on the OpenAI API with MCP integration and an on-platform assistant across modules.

Common questions

What is multi-tenant architecture?

Multi-tenant architecture serves many separate organisations from one application and database, with each tenant's data isolated from the others. It is far cheaper to operate than one deployment per customer, but the isolation has to be enforced structurally.

Has Soham Dang built a multi-tenant SaaS platform?

Yes. He architected Avani Business OS, a 25+ module multi-tenant business platform with role-based access control, used daily by 10,000+ users and replacing more than ten separate internal tools.

Can multi-tenancy be added to an existing application?

It can, but it is expensive: every query, route and index needs revisiting, usually in production. It is one of the decisions genuinely worth making before the first customer rather than after the tenth.