TanStack Start + Convex Auth

A complete SaaS foundation without the framework lock-in.

The proven Nextbase workspace and admin experience, rebuilt around reactive Convex functions and TanStack Router.

Create your workspace Open dashboard

Live application architecture

1TanStack public SSR

2Convex Auth

3Reactive indexed queries

4Transactional mutations

5Local Convex database

Everything connected

Product infrastructure without the glue-code tax

Reactive by default

Indexed Convex queries update every connected screen without polling.

Authorization at the boundary

Every query and mutation validates identity, tenancy, and role.

Local-first development

The complete database and function runtime stays on your machine.

Multi-tenant workspaces

Invite teammates, assign roles, and keep every query inside its tenant boundary.

Billing that reconciles

Stripe checkout, portal access, and durable webhook processing keep access current.

AI and API ready

Scoped API keys and streaming AI endpoints make integrations safe to ship.

Works with your stack

Integrations with clean boundaries

Provider code stays at the edge. Your workspace, entitlement, and product models remain yours.

Explore the architecture

Convex

TanStack

Stripe

Resend

PostHog

OpenAI

command for local development

100%

backend-enforced authorization

Realtime

queries without polling

“Start with the difficult product boundaries already designed, then spend your time on the experience only your company can build.”

Built for small teams with production expectations

Simple foundation

Build first. Scale when customers arrive.

Explore

Free

Run locally

Read the complete docs

Evaluate every product surface

Read the docs

Recommended

Build

Your product

Production SaaS workflows

Durable provider integrations

A codebase your team controls

Create a workspace

Questions, answered

Can I run the complete stack locally?

Yes. The local Convex deployment stores data, files, schedules, and function state on your machine while TanStack Start runs the web application.

Where is authorization enforced?

Every Convex query and mutation checks identity, workspace membership, and role at the backend boundary. Client route guards are an additional UX layer.

Can I replace a provider?

Provider-specific billing, email, analytics, and AI calls live in focused modules. Replacing one still requires adapting its domain mapping and reconciliation behavior.

Is this only a starter UI?

No. It includes the product workflows a SaaS team normally rebuilds: workspaces, projects, billing, admin support, content, feedback, notifications, and tests.

Turn the foundation into your product

Start locally, invite your team, and ship on infrastructure designed for real SaaS operations.

Get started