The infrastructure layer for Global Mobility.

Immigration practice runs on records that have to hold up years later — who was told what, which document was asked for, when it expired, and who could see it. Immistack is being built to hold those records properly, so the evidence exists without anyone having to remember to create it.

In private beta with founding firms

What we can show you today

Not a customer count. The parts of the system a compliance reviewer would actually ask about.

Isolation enforced by the database

Every tenant-scoped table runs Postgres row-level security with ENABLE and FORCE. The application connects as a role that does not hold BYPASSRLS, so it cannot read across a firm boundary even when the code asks it to. We test it the way an attacker would — cross-tenant, over HTTP.

An audit log that cannot be rewritten

The audit trail is append-only and hash-chained, so a deleted or altered entry breaks the chain and shows. Any cross-tenant access writes a CRITICAL entry before the work happens — and if the audit write fails, the work does not happen.

Checklists that come from a versioned pack

Document requirements resolve per visa subclass from a versioned configuration pack, not from a list typed into the code. When the requirement changes, you can still see which version a matter was assessed against.

Four jurisdictions, one codebase

Australia, Canada, the United Kingdom and New Zealand are configuration, not forks. A local rule change ships as a pack version, so a firm working across borders is working in one system rather than four.

Regulator integrations are sandbox today, with production wiring pending accreditation — the full security posture is here, including what we do not have.

Migration practitioners and technologists reviewing a case workflow together

Our Mission

To make the administrative half of migration work disappear, so the people who do it can spend their time on advice rather than on chasing paper.

Immigration is one of the few areas where a filing error changes someone's life. We would rather be the boring, well-audited system underneath that than the one with the most impressive numbers on its About page.