Introduction
What Groundfloor is and how the Customer Portal, Control Plane, Dataplane, and Coderunner fit together.
Groundfloor is a platform for ISVs, enterprises, and SI agencies to build and operate AI-powered applications. The Control Plane is the central management layer — it owns identity, workspaces, authorization, secrets, files, and app metadata.
Platform components
graph TB
CP_UI[Customer Portal<br/>app.groundfloor.cloud]
Admin[Operator Admin<br/>admin.groundfloor.cloud]
API[Control Plane API<br/>FastAPI /v1/*]
PG[(Postgres)]
SP[SpiceDB ReBAC]
DP[Dataplane<br/>customer data]
CR[Coderunner<br/>app runtime]
Shell[Shell host<br/>federated apps]
CP_UI --> API
Admin --> API
Shell --> API
API --> PG
API --> SP
API --> DP
API --> CR| Component | Owner | Purpose |
|---|---|---|
| Customer Portal | Control Plane repo | Web UI for account admins and members |
| Control Plane API | Control Plane repo | REST API for accounts, workspaces, vault, files, secrets, apps |
| Dataplane | Sibling repo | Customer data layer (collections, queries) — apps call via Control Plane proxy |
| Coderunner | External | App execution runtime integrated by Control Plane |
| Shell | groundfloor-v2.5 | Module Federation host for federated remote apps |
Federated apps call Control Plane at /v1/workspaces/{workspace_id}/…. Do not call Dataplane directly from the browser.
Two web surfaces
| Surface | URL | Audience |
|---|---|---|
| Customer ControlPlane | app.groundfloor.cloud | Account admins and members |
| Operator Admin Portal | admin.groundfloor.cloud | Groundfloor staff (VPN + hardware keys) |
One FastAPI backend serves both via /v1/* (customer) and /v1/admin/* (operator) route groups.
What's in the MVP
The Customer Portal ships 14 pillars — accounts, workspaces, users, roles, activity log, data vault, files, secrets, apps, Coderunner UI, process log, LLM gateway, quotas, and environment promotion.
See the Customer Portal overview for pillar-by-pillar status.
Next steps
- Quick start — create your first workspace
- Core concepts — accounts, workspaces, and ReBAC roles
- Shell integration — build a federated app