A platform for building serious software.
Alegor provides the reusable technical foundation behind modern business systems — users, permissions, workflows, documents, APIs, integrations and more.
The Problem
Stop rebuilding the foundation.
Most custom business systems repeatedly rebuild infrastructure that provides little competitive differentiation. Developers spend months reinventing authentication, permissions, audit trails, and file pipelines before shipping their first core business feature.
Alegor starts where most projects spend their first months.
Gain a battle-tested modular foundation so your team builds what makes your business unique.
Custom software without starting from zero.
Alegor combines a reusable technical foundation with software built around the specific workflows, integrations and requirements of an organization.
Instead of choosing between generic off-the-shelf software that cannot fit your operations or building everything from scratch over several years, Alegor offers the middle ground: reusable architecture underneath, bespoke development where it counts.
Composable Architecture
Modular by design.
Identity & Tenancy
Provides unified authentication, user and organization hierarchy, session handling, MFA support, and token management designed for isolated multi-tenant and single-tenant environments.
Permissions & Authorization
Fine-grained, audit-ready authorization engine combining role-based access control with attribute-based dynamic policy evaluation across tenants and resources.
Documents & Storage
Comprehensive document processing engine handling secure uploads, chunked streaming, background OCR/conversion, virus scanning pipelines, and signed URL generation.
Audit & Compliance Logging
Enterprise-grade audit logger recording who changed what, when, and why, complete with before/after state diffs, user agent fingerprints, and tamper-evident signatures.
Workflows & State Machines
Declarative state machine and multi-step workflow orchestrator for business processes, approvals, transitions, and automated compensation actions.
Notifications & Messaging
Unified notification dispatcher featuring tenant-configurable templates, per-user delivery preferences, batching, rate limiting, and delivery status tracking.
Integrations & Webhooks
Comprehensive integration gateway supporting signed outbound webhooks, inbound webhook verification, OAuth client credentials, rate limiting, and dead-letter queue recovery.
Reporting & Aggregation
Analytical querying engine optimized for multi-tenant data summaries, large CSV/Excel/PDF export jobs, and recurring executive report generation.
Multi-Tier Stack
Clear layers. Zero tight coupling.
Alegor cleanly decouples business domain logic from core platform infrastructure and physical compute layers.
Extensibility
Standardize the foundation.
Customize the business.
Alegor is not a rigid template or closed SaaS box that forces your company into a predetermined workflow. The platform provides common technical infrastructure while domain-specific functionality remains 100% customizable in standard code.
- ✓ No proprietary languages: Write clean, standard PHP 8.5+ with full static analysis and unit testing.
- ✓ Replaceable adapters: Swap storage drivers, IdP providers (Okta/Entra), or message queues via clean interface bindings.
- ✓ Full data sovereignty: Host in your own sovereign VPC, private cloud, or on-premise infrastructure.
class InvoiceApprovalWorkflow
{
public function __construct(
private AuthorizationEngineInterface $auth,
private AuditLoggerInterface $audit,
private WorkflowEngineInterface $workflows
) {}
public function approve(Invoice $inv, User $actor): void
{
// 1. Fine-grained RBAC/ABAC verification
$this->auth->authorize($actor, 'invoices.approve', $inv);
// 2. Finite state machine transition
$this->workflows->transition($inv, 'approved');
// 3. Automatic tamper-evident audit
$this->audit->record('invoice.approved', $inv, $actor);
}
}Core Philosophy
Engineering principles.
Every module and architectural pattern in Alegor adheres to strict core engineering principles.
Modularity
Domain services are bounded and decoupled. No spaghetti cross-table dependencies or hidden circular joins.
Explicit Permissions
Default-deny authorization with atomic capability grants and contextual attribute evaluation.
Auditability by Default
Every state mutation captures actor, IP, timestamp, and before/after diffs in an append-only log.
API-First Thinking
APIs and internal endpoints share strict schema DTOs, versioning, and deterministic contracts.
Observability
Deep telemetry hooks across job queues, database queries, and external integration latency.
Replaceable Components
Interface contracts allow swapping cloud drivers (S3/R2/MinIO) or identity systems without refactoring.
Data Ownership
Zero vendor lock-in. Full ownership of database schemas, cryptographic keys, and deployment nodes.
Maintainability
Designed to survive framework upgrades and team turnover over a 10-year enterprise horizon.
Predictable Scalability
Asynchronous background queues and read-replica offloading protect primary transactional latency.
Origins
From production, not theory.
Alegor grew from years of practical experience building complex business systems, integrations, telematics backends, and financial tools. Reusable architectural patterns were systematically extracted, refined, and hardened into a unified platform.
Knowledge Base
Engineering & Architecture
What Makes Software Business-Critical?
Defining business-critical software: high operational stakes, zero data-loss tolerance, audit compliance, and engineering resilience.
Build vs Buy vs Platform: Choosing How to Build Business Software
A strategic evaluation framework for CTOs and CIOs: when to purchase off-the-shelf SaaS, when to build purely custom, and when to adopt a platform foundation.
How to Design Reliable Integrations Between Business Systems
A defensive engineering guide to integrating business systems: idempotency keys, circuit breakers, outbox patterns, and error recovery.
Don't start your next system from zero.
Evaluate the architecture, inspect the module interfaces, or discuss building your business-critical application with the team behind Alegor.