Access framework

Access policy

A reusable visual model for who can see and do what. Applied across pages, routes and workspace data.

Public

Public

Anyone on the internet — no login required.

  • Landing page
  • Pricing
  • Blog
  • Public docs
Guest-allowed

Guest-allowed

Try the product before creating an account.

  • Outcome explorer
  • Demo workspace
  • Preview generator
Registration required

Registration required

Free account needed to keep work or save.

  • Save project
  • Personal dashboard
  • Comments
Verified-user only

Verified-user only

Email or phone confirmed. Required for collaboration.

  • Invite teammates
  • Connect domains
  • Accept payouts
Admin-only

Admin-only

Owner & Admin roles only. Audit-logged.

  • Billing
  • User management
  • Destructive actions
Private workspace

Private workspace

Member of a specific workspace + verified.

  • Internal data
  • Shared assets
  • Workspace settings

Route rules

Map every route to an access tier.

RouteTierEdit
/public
/exploreguest
/appregistered
/app/usersverified
/app/billingadmin
/app/dataprivate
Auth & registration

Sign-in methods and verification rules.

Onboarding

When prompts appear in user journeys.

Security

Posture, RLS coverage and admin protection.