Tenant isolation in the database
Thoshika keeps every company’s data apart with PostgreSQL row-level security, enforced by the database for every query, rather than relying on application code alone.
Gateways that dial out
Ciyora Fabric gateways run on the customer’s side and connect outwards to the platform, so customers do not open inbound ports to their networks.
Audit you can verify
Ciyora Fabric records security-relevant actions in a hash-chained audit log, so a gap or an edit in the history is detectable.
Versioned, repeatable delivery
Database changes are versioned migrations, deployments are declared in Git and applied by GitOps, and builds run on our own CI runners.
Our own real-time stack
Sangam, Thoshika’s chat and meetings app, runs on our own WebRTC signalling and a selective forwarding unit written in Go.
One app for every employee
A single Flutter mobile app gives employees and managers self-service across Thoshika apps, with passkey sign-in.
A deliberately boring stack
We choose mature, well-understood technology so that our effort goes into the product: payroll engines, ledgers, access policies and detections.
| Thoshika services | Java 21 and Spring Boot, PostgreSQL with row-level security, versioned migrations |
|---|---|
| Ciyora Fabric | Go services, gateways and agents; mesh networking; hash-chained audit |
| Web | Next.js and TypeScript, with a shared token-based design system |
| Mobile | Flutter, one app with an app switcher |
| Identity | OpenID Connect and SAML single sign-on, passkeys |
| Delivery | Containers on Kubernetes, GitOps, self-hosted CI runners |
How we ship
- Every feature starts as a written specification benchmarked against the leading products in its market.
- Statutory logic (tax, provident fund, state insurance, professional tax) is isolated in country packs with dated rate tables, so a law change is a data change with a review trail.
- End-to-end tests drive the real web and mobile apps and capture every screen for review before release.
- Secrets are kept out of source code and delivered to environments out of band.
- Accessibility and dark mode are part of the design system, not a later pass.
Like building this way?
We are always interested in engineers who enjoy owning a problem end to end.