Drop-in multi-tenancy for Node.js — from flat SaaS to deep enterprise hierarchies, in one library.

Every SaaS team starts with tenant_id on every table. It works until Month 6 (enterprise config), Month 12 (compliance audit), and Month 18 (data isolation). Stratum gives you all of it from day one — tenant hierarchy, config inheritance, permission delegation, three isolation strategies, ABAC, field-level encryption, audit logging, GDPR compliance, webhooks, and multi-region support.

npx @stratum-hq/create my-app   # scaffold a new project
cd my-app && npm run dev         # autoMigrate handles the rest

Or add to an existing project:

npm install @stratum-hq/lib pg

const stratum = new Stratum({ pool: new Pool(), autoMigrate: true });
await stratum.initialize();

const org = await stratum.createOrganization({ name: "Acme Corp", slug: "acme" });
await stratum.setConfig(org.id, "seat_limit", { value: 25 });

• Tenant hierarchy — tree structure with ltree, up to 20 levels deep
• Config inheritance — values flow root to leaf, parents can lock keys
• Permission delegation — LOCKED / INHERITED / DELEGATED with cascade revocation
• ABAC — attribute-based access control with 9 operators, hierarchical policy inheritance
• Three isolation strategies — shared RLS, schema-per-tenant, database-per-tenant
• Field-level encryption — AES-256-GCM with key rotation
• Audit logging — every mutation with before/after state and actor identity
• GDPR compliance — data export (Article 20) and hard purge (Article 17)
• Webhooks — HMAC-signed lifecycle events with retry and dead-letter queue
• Multi-region — region CRUD with tenant migration
• 310+ tests — validated against real PostgreSQL 16

• Documentation — guides, API reference, package docs
• Landing Page — product overview
• npm — all published packages
• Contributing — setup, code style, PR guidelines

MIT