Enterprise
Your revenue. Your infrastructure.
Verified purchases. Clear workspace boundaries. Revenue data your team controls.
Folio
Of your purchase data you own and can export
Standard rate on tracked revenue (0.5%)
Rails validated server-to-server: Apple · Google · Stripe
Insecure fallbacks in the money path, because it fails closed
Integrates with the rails and identity you already run on
- Apple App Store
- Google Play
- Stripe
- Okta
- Microsoft Entra ID
- Google Workspace
Isolation by construction
Every tenant sealed off inside the database
Workspace isolation is enforced by Postgres row-level security, not by application code a single bug can slip past. Every query is scoped to your tenant at the database layer, so a mistake in a service can never read across the wall.
- Row-level security scoped per workspace
- No cross-tenant reads: enforced in Postgres, not app logic
- Dedicated, isolated infrastructure on enterprise plans
Real rails, no middleman
Wired straight into Apple, Google, and Stripe
CashSDK validates purchases server-to-server, directly against the App Store, Google Play, and Stripe. You keep your own store and merchant relationships. We sit alongside the money flow, never as a reseller in the middle of it.
- Server-to-server receipt and entitlement validation
- Idempotent, cached checks: retries never double-charge
- You own the store and merchant relationships
Fails closed, never open
A money path your finance team can bet on
Money-path services refuse to boot without their secrets. There are no insecure fallbacks, so a missing key stops a deploy instead of silently leaking access. Entitlement writes are idempotent, so an outage delays a purchase, it never drops one.
- Refuses to start without its production secrets
- Zero insecure fallbacks in the money path
- Idempotent writes survive retries and outages
Security & control
Everything procurement asks for
Your workspaces, permissions, and purchase data. See how the pieces fit.
RLS-isolated tenancy
Postgres row-level security keeps each workspace's records separate.
Fails closed in production
Purchase services stop when required production secrets are missing.
Real store integrations
Verify purchases directly with the App Store, Google Play, and Stripe.
Idempotent money path
Idempotent verification and entitlement writes keep retries from duplicating records.
Data you own and export
Export your purchase and entitlement records. Your revenue data stays yours.
SSO and SCIM
Connect your SAML identity provider and provision access with SCIM.
Onboarding and migration
Import subscribers, run in parallel, and verify access before cutover.
Predictable pricing
0.5% of tracked revenue. Custom annual terms above $500K in monthly tracked revenue.
“
We didn't want a reseller between us and the stores, and we didn't want to hand our revenue data to someone else's database. CashSDK is the only paywall layer built to sit alongside the money flow instead of inside it.
The design goal of CashSDK: a closed-source in-app-purchase platform built for teams shipping coding agents.
Let's design your rollout
Tell us about your stack, your stores, and your compliance requirements. We'll map a migration and a deployment that fit, with a fee your finance team can model in one line.