Raise
Raise is a multi-tenant fundraising platform built around six workflows startups actually run during a raise: investor CRM, pipeline tracking, commitments, tasks, secure document sharing, and team collaboration. The engineering weight sits in two places. First, tenant isolation: every query is scoped to a startup, enforced at the database access layer rather than trusted to callers, with fine-grained RBAC on top and a separate restricted authentication path for outside reviewers who should see documents but not the rest of the workspace. Second, the AI copilot: fundraising documents are parsed with LlamaParse, embedded into pgvector, and retrieved to answer contextual questions with citations so an answer can always be traced back to a page. Everything slow runs off the request path through BullMQ and streams back over SSE.
TypeScript · React · Express · PostgreSQL · Prisma · Redis · BullMQ · OpenAI · pgvector · LlamaParse · Supabase
Tenant isolation enforced twice: role middleware plus services that select through composite keys like startupId_id, so a stray findUnique({ id }) still can't cross tenants
External reviewers run on a separate auth path entirely link token, email OTP, separate cookie and table that can only reach /reviewer-portal/*
AI copilot treats the model as untrusted input: it can never write, only propose actions a human approves, and approval re-checks the permission the manual action needs
Grounded RAG over pgvector with hnsw.iterative_scan = 'relaxed_order', because the HNSW index is global across tenants and a small corpus would otherwise lose real matches
Prompt submit and response read are separate requests; a Redis run registry (TTL + 8s heartbeat) makes reconnect, multi-tab, and cross-replica resume work
API and worker are separate processes from one package; eight BullMQ queues plus six recurring maintenance jobs run as Redis-native repeatable schedules
Three-phase uploads so the API never proxies file bytes signed target, direct PUT to storage, confirm with private bytes served only through short-lived signed paths