How long does Ezvento setup take?

Most stores are up and running in under 10 minutes. Create your account, add your store name and address, and start billing. You can add products later or import from Excel.

Is GST compliance automatic in Ezvento?

Yes. Ezvento automatically calculates GST based on your product HSN codes. You can export GSTR-1 and GSTR-3B reports in one click. E-invoices are generated for B2B sales automatically.

Can I use Ezvento on my tablet or phone?

Absolutely. The POS works beautifully on iPad, Android tablets, and any touchscreen device. No expensive POS hardware needed — just a device and a printer.

What happens if internet goes down while using Ezvento?

Ezvento works offline. You can keep billing, scanning barcodes, and printing receipts. When your internet comes back, everything syncs automatically. No sale is ever lost.

What is the price of Ezvento?

Ezvento starts at ₹999/month for the Launch plan (1 store, 3 users) and ₹2,499/month for the Grow plan (3 stores, 10 users). All plans include a 14-day free trial with no credit card required.

Can I track credit (udhar) sales in Ezvento?

Yes. Link a sale to a customer as credit. See all outstanding balances in one place. Send payment reminders. Record partial payments. Full credit ledger for every customer.

Do I need special hardware to use Ezvento?

No. Ezvento works on any device with a browser. For printing, any thermal receipt printer connected via USB or network will work. Barcode scanners plug in directly.

Can I manage multiple stores with Ezvento?

Yes. The Grow plan supports 3 stores, and Scale supports unlimited. See all stores from one dashboard, transfer stock between locations, and get consolidated reports.

Architecture

Ezvento is a multi-tenant POS & Inventory SaaS built on Next.js 16 with strict tenant isolation, RBAC v2, and a modern React 19 + Tailwind v4 stack. This page documents every layer of the system.

Tech Stack

Framework

Next.js16.2.4

App Router, RSC, Server Actions, proxy middleware

React19.2.4

Concurrent features, Server Components, Actions

Styling

Tailwind CSSv4

Utility-first CSS with @theme inline, OKLCH colors

tw-animate-css1.4.0

CSS animation primitives

UI Components

shadcn/ui4.1.2

Base UI primitives (Button, Dialog, Tabs, etc.)

@base-ui/react1.3.0

Headless accessible primitives underpinning shadcn

lucide-react1.7.0

Icon library

framer-motion12.38.0

Declarative animations

Database & ORM

PostgreSQLSupabase

Managed PostgreSQL with RLS, realtime, vector ext

Prisma ORM5.22.0

Type-safe schema, migrations, client generation

Prisma Client5.22.0

Runtime query builder with relation loading

Auth & Security

Supabase AuthPKCE

OAuth + email/phone, JWT hooks, custom claims

@supabase/ssr0.10.0

Server-side rendering cookie management

@supabase/supabase-js2.101.1

Client & server Supabase clients

bcrypt6.0.0

POS PIN & manager PIN hashing

otpauth9.5.1

TOTP 2FA generation & verification

qrcode1.5.4

2FA QR code generation

State & Data

Zustand5.0.12

POS store, global UI state

@tanstack/react-query5.96.2

Server-state caching, infinite scroll, mutations

React Hook Form7.72.1

Performant form handling

Zod3.25.76

Schema validation for forms & APIs

@hookform/resolvers5.2.2

Zod resolver for React Hook Form

Payments & Email

Dodo PaymentsAPI

Subscription billing (Starter/Pro/Enterprise)

Resend4.6.0

Transactional email delivery

PhonePeAPI

UPI POS payments

Charts & Reports

Recharts3.8.1

Sales, inventory, GST visualizations

exceljs4.4.0

Excel export for reports

Testing

Vitest4.1.4

Unit & integration tests (79 tests)

Playwright1.59.1

E2E tests (47 tests)

@testing-library/react16.3.2

Component testing utilities

@vitest/coverage-v84.1.0

Code coverage reporting

DevOps & Tooling

TypeScript5.x

Strict type checking

ESLint9.x

Next.js config linting

Husky9.1.7

Git hooks

Upstash Redis1.37.0

Distributed rate limiting

Multi-Tenant Model

Every row in the database is scoped to exactly one Tenant. The tenantId foreign key is present on all 45 entity models.

Mechanism	Description	Location
Composite Unique Keys	Every business entity carries a `tenantId` FK combined with a natural identifier (e.g., `@@unique([tenantId, sku])` on Product,`@@unique([tenantId, phone])` on Customer).	prisma/schema.prisma
Cascade Deletes	Tenant-scoped relations use `onDelete: Cascade` so that deleting a Tenant removes all dependent rows (Users, Stores, Products, Invoices, etc.).	prisma/schema.prisma
Tenant Suspension	`Tenant.isFrozen` and `frozenReason` allow platform administrators to suspend a tenant account from `admin.ezvento.com`. When frozen, all dashboard mutations return 403.	prisma/schema.prisma
Subscription Gate	API mutations call `requireActiveSubscription()`. Returns 402 Payment Required if the tenant has no active or trialing subscription.	src/lib/api.ts

Tenant Isolation

Application-Level Isolation

Every Prisma findFirst and findMany call includes where: { tenantId }. The getAuthUser() helper decodes the JWT to get the user ID, then resolves the correct tenant from the database — never from JWT claims.

API routes derive tenantIdfrom the authenticated user's DB record via getTenantId(), never from user input or JWT claims. Cross-tenant queries are impossible by construction.

Row-Level Security (RLS)

Supabase PostgreSQL RLS policies enforce tenant boundaries at the database level. All tables exposed via Supabase Data API carry USING (tenant_id = current_setting('app.current_tenant')::text).

The tenant_isolation.sql script generates policies for every model. Prisma $queryRaw sets the tenant context before queries.

Authentication Flow

Supabase PKCE Login

User authenticates via email/password, phone/OTP, or OAuth (Google). Supabase issues an access token with custom claims injected by custom_access_token_hook:tenantId, appUserId,isOwner, isPlatformAdmin,permissionVersion, twoFactorEnabled, and requiresTwoFactor.

Persona Selection

After login, users with multiple roles (e.g., Manager + Cashier) land on /persona-select. A cookie ezvento-persona stores the active persona (OWNER, MANAGER, CASHIER, HELPER). The proxy middleware reads this cookie to enforce cross-persona guards.

2FA Enforcement

All roles except CASHIER require TOTP 2FA. If requiresTwoFactor is true and twoFactorEnabled is false, the proxy redirects to /2fa-setup. The 2FA secret is encrypted before storage.

PIN-Based Cashier Auth

Cashiers log in with a 4-digit PIN (posPin, bcrypt-hashed) instead of a password. After counter selection, the cashier's shift is bound to the session scope. Manager PIN (managerPin) is used for high-risk action approvals.

Session Management

Feature	Implementation	Source
Lazy Session Creation	Anchored to the JWT `jti` claim. On first call to `ensureSession()`, a `Session` row is INSERTed with the current `permissionVersion` snapshot.	src/lib/auth/sessions.ts
Session Revocation	`revokeSession(sessionId, revokedById)` sets `revokedAt`.`revokeAllUserSessions(userId)` force-logs out all devices. Revoked sessions fail validation on the next request.	src/lib/auth/sessions.ts
Permission Version Check	`User.permissionVersion` increments on role/permission changes.`checkPermissionVersion()` compares the JWT snapshot against the DB. Mismatch forces re-authentication (the user refreshes their JWT on next login).	src/lib/auth/permission-version.ts
Scope Binding	`bindSessionScope(sessionId, scopeType, scopeIds)` locks a session to a specific store, counter, or warehouse. Cashier sessions are bound to a `COUNTER`and optionally a `Shift`.	src/lib/auth/sessions.ts
Session Listing	`listActiveSessions(userId)` returns all non-revoked, non-expired sessions with device fingerprint, IP, user agent, and last active timestamp.	src/lib/auth/sessions.ts

Rate Limiting

Auth Routes

Window15 minutes

Max Requests20 / window

ScopePer IP

Applies to login, signup, forgot-password. Uses Upstash Redis in production; in-memory Map fallback in dev.

API Routes

Window1 minute

Max Requests100 / window

ScopePer IP

Applies to all api/** routes. Returns 429 with X-RateLimit-Remaining header.

Development

Disabled in Dev

When NODE_ENV === 'development', rate limiting is skipped entirely to allow rapid E2E testing with Playwright without hitting limits.

CSRF Protection

Origin validation is enforced in src/proxy.ts for all API mutation requests. Only GET, HEAD, and OPTIONS are exempt.

Rule	Behavior
Same-Origin	The request's own `origin` (derived from `request.nextUrl.origin`) is always allowed.
Trusted Origins	Additional origins are read from `NEXT_PUBLIC_APP_URL` and hardcoded localhost ports (`3000`, `3003`).
Referer Fallback	If the `Origin` header is absent, the `Referer` header is parsed via `new URL(referer).origin`.
Violation	Returns `403 Forbidden` with body `{ error: "Invalid request origin" }`.

Proxy / Middleware (`src/proxy.ts`)

In production, /admin/** routes are only served from admin.ezvento.com. Requests on the apex host (ezvento.com) receive a 404 Not Found — the admin surface is completely invisible.

The admin host is configurable via NEXT_PUBLIC_ADMIN_HOST (defaults to admin.ezvento.com). In development, /admin/** is allowed on localhost; the layout still calls requirePlatformAdmin() server-side.

Design System

OKLCH CSS Variables

All theme colors are defined in OKLCH space in src/app/globals.css. The @theme inline block maps Tailwind utilities to CSS variables.

background

foreground

destructive

ring

Brand Palette

Semantic brand colors are defined as CSS custom properties in globals.css:

--blue-600: #2563EBPrimary actions

--emerald-500: #10B981Success / positive

--orange-500: #F97316Warnings / alerts

--rose-500: #F43F5EDanger / errors

Glassmorphism

Three glass effect classes are available:

glass — white 70% opacity + 12px blur
glass-dark — slate-900 80% opacity + 12px blur
.header-glass — white 85% + 16px blur for sticky headers

Reduced Motion

The @media (prefers-reduced-motion: reduce) block in globals.css sets all animation and transition durations to 0.01ms with a single iteration.

All floating, pulsing, and shimmer animations respect this preference automatically.

Architecture

Ezvento is a multi-tenant POS & Inventory SaaS built on Next.js 16 with strict tenant isolation, RBAC v2, and a modern React 19 + Tailwind v4 stack. This page documents every layer of the system.

Tech Stack

Framework

Next.js16.2.4

App Router, RSC, Server Actions, proxy middleware

React19.2.4

Concurrent features, Server Components, Actions

Styling

Tailwind CSSv4

Utility-first CSS with @theme inline, OKLCH colors

tw-animate-css1.4.0

CSS animation primitives

UI Components

shadcn/ui4.1.2

Base UI primitives (Button, Dialog, Tabs, etc.)

@base-ui/react1.3.0

Headless accessible primitives underpinning shadcn

lucide-react1.7.0

Icon library

framer-motion12.38.0

Declarative animations

Database & ORM

PostgreSQLSupabase

Managed PostgreSQL with RLS, realtime, vector ext

Prisma ORM5.22.0

Type-safe schema, migrations, client generation

Prisma Client5.22.0

Runtime query builder with relation loading

Auth & Security

Supabase AuthPKCE

OAuth + email/phone, JWT hooks, custom claims

@supabase/ssr0.10.0

Server-side rendering cookie management

@supabase/supabase-js2.101.1

Client & server Supabase clients

bcrypt6.0.0

POS PIN & manager PIN hashing

otpauth9.5.1

TOTP 2FA generation & verification

qrcode1.5.4

2FA QR code generation

State & Data

Zustand5.0.12

POS store, global UI state

@tanstack/react-query5.96.2

Server-state caching, infinite scroll, mutations

React Hook Form7.72.1

Performant form handling

Zod3.25.76

Schema validation for forms & APIs

@hookform/resolvers5.2.2

Zod resolver for React Hook Form

Payments & Email

Dodo PaymentsAPI

Subscription billing (Starter/Pro/Enterprise)

Resend4.6.0

Transactional email delivery

PhonePeAPI

UPI POS payments

Charts & Reports

Recharts3.8.1

Sales, inventory, GST visualizations

exceljs4.4.0

Excel export for reports

Testing

Vitest4.1.4

Unit & integration tests (79 tests)

Playwright1.59.1

E2E tests (47 tests)

@testing-library/react16.3.2

Component testing utilities

@vitest/coverage-v84.1.0

Code coverage reporting

DevOps & Tooling

TypeScript5.x

Strict type checking

ESLint9.x

Next.js config linting

Husky9.1.7

Git hooks

Upstash Redis1.37.0

Distributed rate limiting

Multi-Tenant Model

Every row in the database is scoped to exactly one Tenant. The tenantId foreign key is present on all 45 entity models.

Mechanism	Description	Location
Composite Unique Keys	Every business entity carries a `tenantId` FK combined with a natural identifier (e.g., `@@unique([tenantId, sku])` on Product,`@@unique([tenantId, phone])` on Customer).	prisma/schema.prisma
Cascade Deletes	Tenant-scoped relations use `onDelete: Cascade` so that deleting a Tenant removes all dependent rows (Users, Stores, Products, Invoices, etc.).	prisma/schema.prisma
Tenant Suspension	`Tenant.isFrozen` and `frozenReason` allow platform administrators to suspend a tenant account from `admin.ezvento.com`. When frozen, all dashboard mutations return 403.	prisma/schema.prisma
Subscription Gate	API mutations call `requireActiveSubscription()`. Returns 402 Payment Required if the tenant has no active or trialing subscription.	src/lib/api.ts

Tenant Isolation

Application-Level Isolation

API routes derive tenantIdfrom the authenticated user's DB record via getTenantId(), never from user input or JWT claims. Cross-tenant queries are impossible by construction.

Row-Level Security (RLS)

Supabase PostgreSQL RLS policies enforce tenant boundaries at the database level. All tables exposed via Supabase Data API carry USING (tenant_id = current_setting('app.current_tenant')::text).

The tenant_isolation.sql script generates policies for every model. Prisma $queryRaw sets the tenant context before queries.

Authentication Flow

Supabase PKCE Login

Persona Selection

2FA Enforcement

All roles except CASHIER require TOTP 2FA. If requiresTwoFactor is true and twoFactorEnabled is false, the proxy redirects to /2fa-setup. The 2FA secret is encrypted before storage.

PIN-Based Cashier Auth

Session Management

Feature	Implementation	Source
Lazy Session Creation	Anchored to the JWT `jti` claim. On first call to `ensureSession()`, a `Session` row is INSERTed with the current `permissionVersion` snapshot.	src/lib/auth/sessions.ts
Session Revocation	`revokeSession(sessionId, revokedById)` sets `revokedAt`.`revokeAllUserSessions(userId)` force-logs out all devices. Revoked sessions fail validation on the next request.	src/lib/auth/sessions.ts
Permission Version Check	`User.permissionVersion` increments on role/permission changes.`checkPermissionVersion()` compares the JWT snapshot against the DB. Mismatch forces re-authentication (the user refreshes their JWT on next login).	src/lib/auth/permission-version.ts
Scope Binding	`bindSessionScope(sessionId, scopeType, scopeIds)` locks a session to a specific store, counter, or warehouse. Cashier sessions are bound to a `COUNTER`and optionally a `Shift`.	src/lib/auth/sessions.ts
Session Listing	`listActiveSessions(userId)` returns all non-revoked, non-expired sessions with device fingerprint, IP, user agent, and last active timestamp.	src/lib/auth/sessions.ts

Rate Limiting

Auth Routes

Window15 minutes

Max Requests20 / window

ScopePer IP

Applies to login, signup, forgot-password. Uses Upstash Redis in production; in-memory Map fallback in dev.

API Routes

Window1 minute

Max Requests100 / window

ScopePer IP

Applies to all api/** routes. Returns 429 with X-RateLimit-Remaining header.

Development

Disabled in Dev

When NODE_ENV === 'development', rate limiting is skipped entirely to allow rapid E2E testing with Playwright without hitting limits.

CSRF Protection

Origin validation is enforced in src/proxy.ts for all API mutation requests. Only GET, HEAD, and OPTIONS are exempt.

Rule	Behavior
Same-Origin	The request's own `origin` (derived from `request.nextUrl.origin`) is always allowed.
Trusted Origins	Additional origins are read from `NEXT_PUBLIC_APP_URL` and hardcoded localhost ports (`3000`, `3003`).
Referer Fallback	If the `Origin` header is absent, the `Referer` header is parsed via `new URL(referer).origin`.
Violation	Returns `403 Forbidden` with body `{ error: "Invalid request origin" }`.

Proxy / Middleware (`src/proxy.ts`)

In production, /admin/** routes are only served from admin.ezvento.com. Requests on the apex host (ezvento.com) receive a 404 Not Found — the admin surface is completely invisible.

Design System

OKLCH CSS Variables

All theme colors are defined in OKLCH space in src/app/globals.css. The @theme inline block maps Tailwind utilities to CSS variables.

background

foreground

destructive

ring

Brand Palette

Semantic brand colors are defined as CSS custom properties in globals.css:

--blue-600: #2563EBPrimary actions

--emerald-500: #10B981Success / positive

--orange-500: #F97316Warnings / alerts

--rose-500: #F43F5EDanger / errors

Glassmorphism

Three glass effect classes are available:

glass — white 70% opacity + 12px blur
glass-dark — slate-900 80% opacity + 12px blur
.header-glass — white 85% + 16px blur for sticky headers

Reduced Motion

The @media (prefers-reduced-motion: reduce) block in globals.css sets all animation and transition durations to 0.01ms with a single iteration.

All floating, pulsing, and shimmer animations respect this preference automatically.

Architecture

Tech Stack

Multi-Tenant Model

Tenant Isolation

Authentication Flow

Supabase PKCE Login

Persona Selection

2FA Enforcement

PIN-Based Cashier Auth

Session Management

Rate Limiting

CSRF Protection

Proxy / Middleware (src/proxy.ts)

Design System

Architecture

Tech Stack

Multi-Tenant Model

Tenant Isolation

Authentication Flow

Supabase PKCE Login

Persona Selection

2FA Enforcement

PIN-Based Cashier Auth

Session Management

Rate Limiting

CSRF Protection

Proxy / Middleware (src/proxy.ts)

Design System

Proxy / Middleware (`src/proxy.ts`)

Proxy / Middleware (`src/proxy.ts`)