4
Plan tiers
Free, Starter, Pro, Enterprise
2
Role axes
Platform-wide + workspace-scoped
100%
Workspace data isolation
Enforced at the query level
4
Metered resources
Metered usage is supported by default and is customizable and scalable to meet your needs
Multi-tenancy, billing, and team management are solved. Focus on what makes your product unique.
True workspace isolation
Every tenant gets their own content, members, billing, API keys, and audit trail. Isolation is applied at the database query level , no manual filtering required.
Stripe workspace billing from day one
4 plan tiers (Free through Enterprise) with seat limits, storage tracking, and API call metering. Plan enforcement happens automatically at invite time and on each endpoint call.
Self-service team management
Email invitations, role assignment, member removal, and last-owner protection. Customers manage their own teams without touching your admin panel.
Developer-grade API infrastructure
Scoped workspace API keys with bcrypt-hashed storage, HMAC-signed webhooks, and per-workspace API call metering, ready to expose to your customers.
Multi-tenant plugin
Official @payloadcms/plugin-multi-tenant. All tenant-scoped collections auto-filtered to the active workspace with full data isolation at the query level, not the UI.
Workspace Stripe billing
Free, Starter, Pro, and Enterprise tiers with seat, storage, and API quota enforcement by default.
Email invitations + team mgmt
Secure token invitations, role assignment at invite time, resend, revoke, and last-owner protection.
2-axis role system
Platform-wide roles (Super Admin, Admin, Developer) plus workspace-scoped roles (Owner, Admin, Editor, Viewer).
Scoped workspace API keys
Four permission scopes, bcrypt-hashed storage, one-time reveal, expiration, soft revocation, last-used tracking.
HMAC-signed webhooks
Per-workspace outbound webhooks with event subscriptions, optional signing secret, and delivery tracking.
Immutable audit log
Write-protected per-workspace audit log for workspace events and activities.
Usage metering
Seat count, storage bytes, and monthly API calls tracked per workspace with plan limits displayed in billing tab.
Platform admin tools
Tenant impersonation with persistent banner, workspace suspension, and platform-wide admin bypass of tenant scoping.
Clone, configure Stripe and a database, choose your tenant routing mode, and deploy.
Accept the GitHub invitation, git clone the private repo, pnpm install, copy .env.example to .env.local.
Add your MongoDB, PostgreSQL URL, Stripe secret key with subscription products configured, and Resend API key (or other email senders like Nodemailer, etc). Environment variable reference is included.
Run pnpm seed to create the platform admin, first workspace, and demo content. Deploy to Vercel, Netlify, Digital Ocean or any Node.js host.
The Payload multi-tenant plugin adds a tenant relationship to every scoped collection and injects a where clause into every find query. Platform admins bypass the filter automatically; all other users see only their workspace's data.