Skip to content
CleverHiveCleverHive Technologies

Features

The part that does not change when you add an application

Applications come and go as a business grows. The organization underneath them — who works here, where, and what they may do — stays. That foundation is what CleverHive is.

Business management

One structure, shared by everything you switch on

This is what an application joins when you add it. It is set up once, by you, and never again per tool.

  1. Organization

    One account for the business. Every application reads it.

  2. Branches

    Each location you operate from. Applications switch on per branch.

  3. People

    Everyone who works for you — most of whom never sign in.

  4. Roles and permissions

    What each person may do, decided once and honoured everywhere.

One organization

Your business is one account. Every application reads the same organization rather than keeping its own copy of your staff list.

Adding an application does not mean re-entering who works for you, or discovering later that two tools disagree about it.

Branches

Every location you operate from. Applications are switched on branch by branch, and people can be scoped to the ones they work at.

A second outlet is a branch, not a second subscription. Someone who runs one location sees that location.

People, separate from logins

A person is someone who works for you. A login is an account they may or may not have. Most staff never sign in, and the directory holds them anyway.

A kitchen porter belongs on the staff list without being given a dashboard, and paying per user should not mean paying for people who never open it.

Applications

Added when the business needs them, from one approved catalogue. Each declares what it would ask of your organization before you install it.

Owning an application, installing it, making it available at a branch and permitting a person to use it are four separate decisions.

Security and access control

Permission is checked on the server, on every request

Not once at sign-in, and never in the browser. Each of these is working today and covered by tests — nothing on this list is a plan.

Roles and permissions

One role per person for their place in the business, plus job roles layered on top. Every action is checked against them on the server.

What someone may do is decided once and honoured everywhere, rather than configured again inside each application.

A ceiling nobody can exceed

Nobody can grant access they do not hold themselves. The check runs inside the same database transaction as the change.

An administrator cannot quietly build a role more powerful than their own, and the rule cannot be skipped by a screen that forgot it.

Access recalculated every request

Membership, role, branch scope and entitlement are re-read on every call. Nothing about permission is stored in the session token.

Revoking someone takes effect on their next click, not their next sign-in.

Audit

Every change records who made it and when, written in the same transaction as the change itself.

The trail cannot disagree with what happened, because a change that rolled back leaves no entry.

Tenant isolation

One organization can never read another’s data. It is enforced in the database itself, not only in application code.

A bug in a screen cannot leak another business’s records, because the database would refuse the query.

Notifications

Things that happen in the platform — a branch added, someone invited — reach the people permitted to see them.

Each notification is filtered by the same permission rules as the page it points at.

Get started

The foundation is ready. Set yours up today.

Organization, branches, people, roles and permissions all work now. The applications join them as they ship.