Identity and access control
Every user and service authenticates through self-hosted Keycloak with MFA/OTP support. Roles and organization scoping gate what a brand, seller, or staff account can see and do.
Security and trust
A self-hosted platform, with an access model you control.
9010 runs on root servers with self-hosted identity, secrets, storage, monitoring, and event infrastructure. No brand data routes through a third-party SaaS analytics or telemetry vendor by default.
How trust is built into the stack
Every layer is self-hosted, so nothing about your data is opaque.
Secrets management
Credentials are stored and rotated through Infisical rather than checked into application code or shared over chat. Nothing sensitive ships hardcoded into a container image.
Data storage and residency
Structured records live in Postgres/PostGIS, documents and media in MinIO object storage, and flexible records in SurrealDB. All of it runs on root servers you control, not a third-party SaaS data lake.
Event auditability
State changes publish to NATS JetStream as durable events, giving every mutation a replayable trail instead of a silent database write.
Monitoring without third-party telemetry
Application errors are captured by a self-hosted Bugsink instance and performance is tracked with a self-hosted Lighthouse CI server, so operational signal never leaves your infrastructure.
Explicit access model per brand
Every brand chooses connected operations, managed periphery, or phased access through the operations intake. 9010 never assumes deeper system access than a brand grants.
Access model
You decide how close 9010 gets to your systems.
The operations readiness intake sets the boundary before the first campaign runs.
Connected operations
You grant scoped access to inventory, warehouse, order, delivery, payment, or customer-care workflows so 9010 can coordinate campaigns against real operating state.
Managed periphery
9010 runs campaigns, sellers, follow-up, and reporting without deep system access, keeping your core systems fully in-house.
Phased access
Start at the periphery, prove capacity, then extend access to deeper workflows once the first operating review is complete.
Ready to scope the right access model for your brand?
Start with the operations readiness intake, or talk to sales about a connected setup.