Platform back-office
The platform back-office at /admin is the surface Maddict staff use to run
the platform: provisioning agencies, setting their plans, and overseeing the whole
estate. It is not part of any agency’s workspace.
Strictly gated — and invisible to others
Section titled “Strictly gated — and invisible to others”Access requires the platform-admin claim. For anyone without it, /admin
returns a 404: the back-office doesn’t merely deny access, it doesn’t reveal
that it exists. This keeps the platform surface hidden from tenants entirely.
What platform admins do here
Section titled “What platform admins do here”| Task | Description | Detail |
|---|---|---|
| Provision agencies | Create a tenant with a name, tier, seat cap, and validity, and invite its first admin. | Provisioning agencies |
| Set tiers & limits | Choose the plan that resolves to the agency’s entitlements. | Tiers & entitlements |
| Suspend / reactivate | Cut off or restore an agency’s access. | below |
| Renew validity | Extend an agency’s access period. | below |
| Review the audit log | See an immutable record of platform actions. | Audit log |
Suspend, reactivate, and renew
Section titled “Suspend, reactivate, and renew”- Suspend an agency to immediately stop its members reaching tenant data (access is re-checked on every request).
- Reactivate to restore access.
- Renew to extend the validity period before or after expiry.
These actions take effect right away and are recorded in the audit log.
Separation from tenant data
Section titled “Separation from tenant data”The back-office manages agencies and plans — it is deliberately separate from the audiences agencies build. Platform admins provision and oversee; they don’t work inside a tenant’s audiences. This separation is part of how Maddict keeps tenant data isolated. See Tenant data isolation.