Data models

This page documents the primary domain entities. For schema definitions, see the migration files in the Core API repo.

Core entities

Represents an authenticated person. One user can belong to multiple organizations.

A company or team account. The primary billing and access control boundary.

Junction table linking users to organizations with a role.

A user can be a member of many organizations. An organization can have many members. The Membership table holds the role for each pair.

Data type	Storage	Notes
Relational data	Postgres	Primary store, via Core API
Sessions	Redis	TTL-based, auto-expire
File uploads	S3-compatible object store	Referenced by URL in Postgres
Search index	[Search service]	Synced from Postgres via worker

The following fields are encrypted at rest and must never appear in logs:

If you’re adding a new field that contains PII or credentials, flag it in your PR for security review.