Tenant isolation
Every agency is resolved through its assigned subdomain or domain and tenant records are separated from platform administration.
Caff Air health center
Security, reliability, and subscription health for tenant travel operations
Caff Air is a CaffStack project shaped by delivery-first engineering: clear scope, maintainable architecture, security mindset, performance, launch support, and iteration after release.
JWT access control
Platform and tenant sessions are separated, validated by different strategies, and locked before protected dashboards render.
Subscription lifecycle
Trials, active periods, renewals, past-due states, and expiries are tracked as first-class operational records.
Billing audit trail
Renewals create tenant payment records so commercial decisions can be reviewed from platform operations.
Operational posture
What this page verifies for search engines and operators
This health page is written as a durable public reference for how Caff Air treats uptime, data separation, subscription continuity, authentication, and system access. It helps tenants and platform operators understand the current security model before deeper monitoring dashboards are added.
Public signup creates tenant, owner, role, settings, trial dates, and a first subscription audit record.
Tenant sign in checks account status and subscription status before issuing an authenticated session.
System admin routes require a platform token and cannot be opened with a tenant token.
Expiry sync can move overdue tenants into past-due or suspended states for controlled access.
Security headers restrict framing, MIME sniffing, permissions, referrers, and unsafe external surfaces.
Local page images are served from the application public folder instead of hotlinking remote assets.
Security controls
Caff Air uses route-level locks, HTTP-only auth cookies, server-side API forwarding, separate platform and tenant token validation, and account status checks before access is granted.
Renewal continuity
Subscription renewals extend the current period from the correct base date and payment records remain linked to the tenant for later billing review.
Next health layer
The next phase can add live database checks, queue status, webhook status, DNS validation, uptime probes, audit logs, and notification delivery health.