Built for scale.
Designed for simplicity.
The PropTech platform architecture powering multifamily real estate operations. A single PostgreSQL database, unified authentication, a common AI gateway, and a 60+ field property data model shared across every application.
The shared data layer powers everything
Every application reads and writes to the same PostgreSQL database, separated by schema prefixes. Property data created in UnitStacks is instantly available to TransitionTrack, PostFolio, Tidua, CampusIQ, and Quorum.
Schema-separated namespaces (public.*,
tt.*,
pf.*,
tidua.*,
campusiq.*) keep application data clean while sharing the same auth, property, and organization records.
Six pillars of the UnitStacks platform
Infrastructure capabilities shared across every application in the ecosystem.
Auth & SSO
Supabase Auth with Microsoft Entra ID (Azure AD) as the identity provider. A single sign-on session works across every application. No separate logins, no password fatigue.
8-Role RBAC
OrgOwner, OrgAdmin, PropertyManager, RegionalManager, MaintenanceTech, Leasing, Accounting, and Viewer. Row-level security enforces org isolation at the database layer — not just the API.
AI Gateway
Centralized access to OpenAI GPT-4o and Anthropic Claude. Applications consume AI capabilities through a unified routing layer. Configuration, rate limits, and model selection are managed in one place.
Document Vault
Secure file storage backed by Supabase Storage. Leases, inspection reports, compliance certificates, and marketing assets — all linked to their property record, indexed, and auditable.
Integration Framework
Webhooks, Microsoft Graph API, Meta Business API, and IPEDS data pipelines built in. The platform is designed to connect to your existing property management and investment workflows.
Audit Logging
Every state change across every application generates an immutable audit record. Who changed what, when, from which module. Full traceability for compliance, disputes, and portfolio reviews.
60+ fields per property. Complete portfolio intelligence.
The UnitStacks Property model is the master record for all property data in the ecosystem. Every application reads from it. Every integration writes to it.
Everything in your portfolio, at a glance
The UnitStacks dashboard aggregates live data from every connected application. KPIs, lease pipeline, budget variance, and smart alerts — always current, always actionable.
Five modules today.
More tomorrow.
"The UnitStacks platform is designed to host an expanding ecosystem of applications. The shared data layer means every new application instantly benefits from your existing property data, user permissions, and AI configuration — on day one."
TransitionTrack
M&A due diligence and property onboarding. Shares property records and user auth with the platform.
PostFolio
AI-generated social content tied directly to property data — address, amenities, occupancy.
Tidua
Document audit and lease classification. Compliance findings are linked to the property record.
CampusIQ
University enrollment and student housing market intelligence. Geo-tagged to your portfolio.
Quorum
Executive operations overview. Cross-application KPIs surfaced from the shared data layer.
Enterprise-grade security at every layer
Security is not an afterthought. It is built into the architecture from the database up.
Row-Level Security
PostgreSQL RLS policies on all 23 public schema tables. Org isolation enforced at the database layer via public.get_user_org_ids(). No application-layer bypass possible.
AES-256-GCM Encryption
Sensitive fields encrypted at rest using AES-256-GCM. Supabase Vault for secret management. TLS 1.3 in transit. Database backups are encrypted before leaving the region.
Microsoft SSO Only
Email and password authentication has been removed. All access goes through Microsoft Entra ID. Domain restriction via ALLOWED_EMAIL_DOMAINS env. Only approved organizations can access the platform.
Rate Limiting
100 requests per minute per IP across all services. Express rate-limit for Node.js applications. SlowAPI for Python (FastAPI) services. Brute-force and scraping attacks are blocked at the API layer.
Domain Restriction
Authentication callbacks validate email domains against an allow-list. Users from unapproved domains are rejected before a session is created. Fully configurable per deployment environment.
Immutable Audit Trails
Every write operation across every application creates an append-only audit record. Actor, timestamp, resource, and delta. Non-repudiable, exportable, and linked to individual user sessions.
See the applications built
on this platform
TransitionTrack, PostFolio, Tidua, CampusIQ, and Quorum — each purpose-built for a different workflow, all sharing the same foundation.