Skip to main content

CODITECT Workflow Diagrams and Narratives

CODITECT Workflow Diagrams and Narratives

Version: 1.0.0 Date: December 24, 2025 Author: AZ1.AI INC Architecture Team


Business Model Overview

┌─────────────────────────────────────────────────────────────────────────────┐
│ CODITECT Business Model │
├─────────────────────────────────────────────────────────────────────────────┤
│ │
│ CUSTOMERS AZ1.AI INC GOOGLE │
│ ───────── ────────── ────── │
│ │
│ ┌──────────────┐ ┌──────────────┐ ┌──────────┐ │
│ │ Individuals │──── $19-99 ──│ │ │ │ │
│ └──────────────┘ /mo │ │ │ │ │
│ │ │ │ │ │
│ ┌──────────────┐ │ AZ1.AI │ Monthly │ GCP │ │
│ │Organizations │── $99-500 ───│ INC │──────────────│ Services │ │
│ └──────────────┘ /mo │ │ Infrastructure│ │ │
│ │ (Billing │ Fees │ │ │
│ ┌──────────────┐ │ Entity) │ │ │ │
│ │ Businesses │── Custom ────│ │ │ │ │
│ └──────────────┘ └──────────────┘ └──────────┘ │
│ │ │
│ │ Automated │
│ ▼ │
│ ┌──────────────────┐ │
│ │ Auto-Provision │ │
│ │ Auto-Onboard │ │
│ │ Auto-Offboard │ │
│ │ (Payment-Based) │ │
│ └──────────────────┘ │
│ │
└─────────────────────────────────────────────────────────────────────────────┘

Key Principles:

  1. AZ1.AI INC is the billing entity - All customers pay AZ1.AI INC directly
  2. AZ1.AI INC pays Google - Monthly infrastructure fees to GCP
  3. Payment-driven automation - Provisioning, onboarding, and offboarding are fully automated based on payment status
  4. No manual intervention - System operates autonomously for standard workflows

1. User Registration Workflow

Narrative

A new user discovers CODITECT and begins their journey. The registration process is designed to be frictionless while capturing essential information for billing and provisioning. Users can sign up with email/password or use OAuth providers (Google, GitHub). Upon successful registration, the system creates their account but does NOT provision resources until payment is confirmed.

Sequence Diagram

State Diagram


2. Subscription and Payment Workflow

Narrative

AZ1.AI INC uses Stripe as the payment processor. When a user selects a subscription tier, they are redirected to Stripe Checkout. Upon successful payment, a webhook triggers the automatic provisioning of their cloud workstation. Failed payments trigger a grace period workflow that eventually leads to resource suspension and offboarding.

Payment Flow Diagram

Billing Cycle Diagram

AZ1.AI to Google Payment Flow


3. Workstation Provisioning Workflow

Narrative

When a user completes payment, the system automatically provisions a Cloud Workstation. The provisioning is entirely automated with no manual intervention required. The workstation configuration is determined by the subscription tier. Provisioning typically takes 60-90 seconds.

Auto-Provisioning Sequence

Provisioning State Machine

Tier-Based Configuration


4. Multi-Tenant Architecture

Narrative

CODITECT supports multiple tenant types: individuals, organizations, and enterprises. Each organization is a complete isolation boundary with its own users, teams, projects, and workstations. Data isolation is enforced at the database level using PostgreSQL Row-Level Security (RLS), ensuring that tenants can never access each other's data.

Tenant Hierarchy Diagram

Data Isolation Layers

Tenant Isolation Security


5. Multi-User Collaboration Workflow

Narrative

Organizations can have multiple users with different roles. Users are invited by admins, and upon accepting the invitation, they gain access based on their assigned role. Each user gets their own workstation, but they share access to organization projects and repositories.

User Invitation Flow

Role-Based Access Matrix

Team Collaboration Model


6. Third-Party Auditor Access Workflow

Narrative

Organizations may need to grant temporary access to external auditors for compliance reviews, security assessments, or financial audits. Auditors receive read-only access to specified resources with full audit logging of their activities. Access is time-limited and automatically revoked upon expiration.

Auditor Onboarding Flow

Auditor Access Scope

Auditor Lifecycle


7. Compliance and Regulatory Workflows

Narrative

CODITECT is designed to meet enterprise compliance requirements including SOC 2 Type II, GDPR, HIPAA, and PCI DSS. The platform automatically generates compliance artifacts, maintains audit trails, and enforces security policies required by these frameworks.

Compliance Framework Overview

GDPR Data Subject Request Flow

SOC 2 Control Monitoring

Data Residency and Sovereignty


8. Auto-Offboarding Workflow

Narrative

When a subscription lapses or is canceled, the system automatically initiates the offboarding process. This includes a grace period for payment recovery, resource suspension, data export options, and eventual cleanup. The process is fully automated with no manual intervention required.

Offboarding Sequence

Offboarding Timeline

Resource Cleanup Checklist


9. End-to-End User Journey

Complete Lifecycle Diagram


Appendix: Quick Reference

Payment-Triggered Actions

EventAutomatic Action
Checkout completedProvision workstation
Payment successfulActivate/restore access
Payment failedSend notification, start grace period
Subscription canceledBegin offboarding workflow
Plan upgradedUpgrade workstation config
Plan downgradedSchedule workstation resize

User Roles Summary

RoleDescriptionWorkstationBilling Access
OwnerOrganization creatorYesFull
AdminDelegated administratorYesView only
DeveloperFull development accessYesNone
ContractorTime-limited, scoped accessYesNone
AuditorRead-only compliance accessNoView only
ViewerRead-only project accessNoNone

Compliance Status

FrameworkStatusCertification Date
SOC 2 Type IIIn ProgressQ2 2026
GDPRCompliantCurrent
HIPAAReady (BAA Available)On Request
PCI DSSDelegated to StripeCurrent

Document Version: 1.0.0 Last Updated: December 24, 2025 Author: AZ1.AI INC Architecture Team