License, activate, and govern your SaaS at scale
ValidonX is a multi-tenant licensing and activation platform built for SaaS vendors. API-first architecture, tenant isolation, entitlement enforcement, and usage tracking — all behind a single Integration API.
POST /v1/integration/licenses/{key}/validate
{
"valid": true,
"license": { "status": "active" }
}How ValidonX Works
A single platform connecting your SaaS product to its licensing, activation, and entitlement infrastructure — all through a resolver-based, API-first architecture.
Tenant Provisioning
Admin creates a tenant. The pipeline auto-provisions a dedicated database, seeds configuration, generates API keys, and activates the account.
Resolver-Based Routing
Every request is resolved to a tenant via X-API-Key (Integration API) or Bearer token (Dashboard). The resolver switches the database connection per-request.
Integration API
Your application calls the Integration API to validate licenses, create activations, check entitlements, and record usage — all with per-tenant isolation.
Governance & Audit
Every state change is logged. Rate limiting, error envelopes (ADR-009), and structured audit events provide full observability.
For SaaS Vendors
Everything you need to license, activate, and meter your product.
License Validation
Validate perpetual and subscription licenses in real-time. Supports expiry, revocation, and grace periods.
Activation Management
Track per-device activations with idempotency. Enforce max activation limits per license via entitlements.
Entitlement Enforcement
Boolean and metered entitlements. Check feature access and usage limits through a single API call.
Usage Tracking
Record usage events with optional idempotency keys. Supports API calls, activations, and custom metrics.
API-First Design
Five POST endpoints. Standard JSON envelopes. Rate limit headers. X-Request-ID tracking on every response.
Multi-Tenant Isolation
Each tenant gets a dedicated database. Resolver-based routing ensures zero cross-tenant data leakage.
For Engineering Teams
Built by engineers, for engineers. Every decision documented. Every error structured.
Structured Error Taxonomy
Every error follows ADR-009: machine-readable codes, human-readable messages, request IDs, and typed error envelopes.
LICENSE.NOT_FOUND · ACTIVATION.LIMIT_EXCEEDED
TENANT.STATUS.SUSPENDED · RATE_LIMIT.EXCEEDEDAudit Trail
Every provisioning stage, every license validation, every activation — logged with tenant_id, request_id, severity, and structured metadata.
ACTIVATION.CREATED · LICENSE.VALIDATED
USAGE.RECORDED · PROVISIONING.COMPLETEDRate Limiting
Per-key rate limits with X-RateLimit-Limit, X-RateLimit-Remaining, and X-RateLimit-Reset headers on every response. 429 responses include Retry-After.
Architecture Decision Records
40+ ADRs documenting every platform decision. Multi-tenant data model, provisioning pipeline, error taxonomy, API versioning, and more.
Architecture Highlights
Database-per-tenant
Full data isolation. Each tenant gets vx_tenant_{code} with independent schema and migrations.
Resolver-based
Middleware resolves tenant from API key or user token. No global state. No shared queries.
API-first
5 Integration endpoints, standard envelopes, versioned, rate-limited, audited. Built for machine consumption.
Security & Governance
Tenant isolation, HMAC-SHA256 key hashing, structured audit trails, and defense-in-depth at every layer.
Tenant Isolation
Dedicated database per tenant. No shared tables. Middleware enforces connection switching.
API Key Security
Keys hashed with HMAC-SHA256. Never stored in plaintext. Constant-time comparison.
Audit Logging
Every mutation logged to platform audit_logs. Structured event codes, severity levels, tenant context.
Error Taxonomy
ADR-009 compliant. No stack traces leaked. Typed error envelopes on every failure path.
Built for Production
ValidonX isn't a proof of concept. It's a production-grade platform backed by rigorous engineering.
30+
API Endpoints
12
Provisioning Stages
40+
Architecture Decision Records
100+
Error Codes Documented
GDPR Compliant
Data export, right to erasure, consent audit trail, DPA for enterprise tenants. Built for EU compliance from day one.
99.9% SLA Target
Health checks, automated backups (RTO 4h / RPO 24h), Sentry error tracking, Prometheus metrics, and disaster recovery runbook.
Open API Spec
OpenAPI 3.1 specification, interactive Scalar API explorer, PHP and JavaScript SDKs with TypeScript definitions.
What's Next
We ship fast. Here's what's coming.
AI-Powered Insights
Usage anomaly detection, activation pattern analysis, and predictive forecasting.
Real-Time Dashboard
Live activation map, API call stream, and webhook activity feed via WebSockets.
White-Label Portal
Custom branding, custom domains, and embeddable developer portals for enterprise.
See It In Action
A single API call to validate a license. That's all it takes.
POST /api/v1/integration/licenses/VXL-abc123/validate
Headers:
X-API-Key: VXS-your-secret-key
Content-Type: application/json
Body:
{
"hardware_id": "device-001",
"app_version": "2.1.0"
}{
"data": {
"valid": true,
"license": {
"key": "VXL-abc123",
"status": "active",
"type": "subscription",
"expires_at": "2027-04-03T00:00:00Z"
},
"entitlements": {
"max_activations": 50,
"current_activations": 12
}
}
}Stay in the loop
Product updates, engineering insights, and release notes. No spam.
Ready to ship licensing
that actually works?
Get started with ValidonX in minutes. No credit card required.