Features/Agency Workspace
Private beta

Agency Workspace

Multi-tenant agency organization with members, roles, client seats, entitlements, and per-agency tenant isolation.

For: AgenciesCategory: platform

Private beta — available to agency partners

This capability is live and working for agencies in GeoScript's private beta program. Learn about agency access →

What Agency Workspace does

The Agency Workspace is GeoScript's multi-tenant organization layer for agencies. Every agency has a workspace that holds its members, roles, client seats, opportunities, reports, and entitlements. Workspaces are strictly isolated from each other — data in one agency's workspace is never accessible from another. The workspace is the container that everything else in GeoScript operates within.

How it works

Members and roles

Each workspace has members — users who belong to the agency. Members have roles that determine what they can see and do within the workspace. Role-based access controls enforce who can create and publish Pitch Rooms, approve deployments, and access client reports.

Client seats and entitlements

Active client seats are held in the workspace. Each seat grants a bounded entitlement bundle: AI monitoring, website intelligence, recommendations, reporting, and pitch rooms for that client. Entitlements are workspace-scoped — what one client seat is entitled to does not affect another.

Tenant isolation: Tier 1 invariant

Workspace isolation is enforced at the service layer with a WS_FORBIDDEN guard. This is a Tier 1 invariant — it is not a query-level filter that can be bypassed. A workspace cannot access another workspace's observations, clients, opportunities, or reports. This is enforced at the database policy level and treated as a hard contract: code that violates it does not ship.

What Agency Workspace does not do

Clear boundaries increase trust. These limitations are documented explicitly, not buried in footnotes.

  • The Agency Workspace is not designed for direct-business use — it is an agency-tier structure.

  • Workspace isolation does not apply within the workspace — members of the same agency share access to that agency's data.

  • The workspace is not a general-purpose project management tool — it is purpose-built for the GeoScript agency workflow.

  • GeoScript does not support workspace merging or data migration between workspaces.

Related

Other features

GeoScript is in private beta

Agency partners get access to the full capability set — acquisition, monitoring, website intelligence, optimization, deployment, and reporting — for $299/month per active client.