Supabase

Multi-tenant Next.js architecture with Postgres RLS

Workspaces as the tenant boundary, a workspace_id column on every row, and Postgres RLS as the enforcement layer so a missing WHERE clause in your code cannot leak data across tenants. The B2B architecture decision worth getting right on day one.