Skip to main content

​
Quickstart

​
What is EntityShield?

EntityShield is a multi-tenant SaaS platform for business entity governance, permit tracking, and compliance management. It helps consultants, multi-entity operators, compliance managers, and permitting teams keep every entity, license, and filing organized. It is not a Shopify app. It is a Cloudflare-edge-first stack with four React portals backed by a Hono API on Cloudflare Workers.

​
Four portals, one API

All four portals authenticate through Auth0 (custom domain auth.pcnaid.com) and call the same API at https://api.entityshield.app.

​
Sign-in model

EntityShield uses Auth0 Universal Login with PKCE. Each portal registers its own Auth0 SPA application with a distinct audience: An Auth0 Action decorates JWTs with EntityShield-specific claims (userId, customerId, role, workspace_memberships). The API validates the JWT against the matching audience using Auth0 JWKS.

​
Public integration points

  • Webhooks — Subscribe to EntityShield events via /v1/webhook-endpoints. Outbound payloads are HMAC-SHA256 signed.
  • Public health endpoint — GET /health returns service name, version, environment, and timestamp without authentication.
  • Landing page API — GET /v1/public/landing returns public-facing data.
  • Public workspace branding — GET /v1/public/workspaces/:slug/branding returns a workspace’s public branding config.
  • Calendar feed — GET /ics/:feedId serves iCal feed data for external calendar integration.

​
Tech stack

​
Get started with development

The API reference is at /nodes/web-apps/entityshield/developer/api/index. See the architecture overview at /nodes/web-apps/entityshield/developer/architecture-overview for the component diagram and data model.