EAFX LLC
Our Products
We build and operate our own software, not just client engagements. Every product below runs on a single shared foundation, so identity, licensing and payment are solved once rather than re-invented per application.
Each product is an OpenID Connect client of sysidm. None of them stores a password or talks to a payment provider directly.
The foundation
Everything below uses it
sysidm is the identity and payment platform we deploy in front of our applications. It issues the tokens, holds the user records, tracks who is entitled to what, and settles money — so an application can be built without ever implementing login, password reset, seat limits or invoicing.
- Standards-based sign-on. OpenID Connect with the authorization code flow and PKCE, RS256-signed tokens, refresh tokens and server-side session management. Any conforming client can federate to it.
- Accounts and entitlements. Registration, activation, membership roles, seat caps and invitations are enforced centrally rather than per application.
- Subscriptions and payment. Plans, billing records and lifecycle mail per application. Credentials, product catalogue and webhook are configured per application and per environment, and settlement lands in the customer’s own merchant account — we never sit between you and your money.
- Deployed, not self-serve. sysidm is delivered as an enterprise deployment: we stand it up, configure the applications that federate to it, and hand over the operational keys.
Planning and delivery tracking
whydash turns the way teams actually run work into a shared, live surface. Initiatives break down into rows that each carry the why, the what, the who, a status and a running update log — so the reasoning behind a decision stays attached to the decision instead of living in someone’s memory or a stale slide.
- Initiative → row hierarchy with owner, status and a timestamped update trail per row.
- Multi-user by design: the same view the team uses in a meeting, edited live.
- Replaces the shared spreadsheet without inheriting its merge conflicts.
Sign-in and entitlements are handled by sysidm.
Open whydash
Budgeting and financial planning
ioBudget brings structured budgeting to the browser. It is the multi-user web successor to our desktop application, keeping the discipline of a real budget — planned against actual, line by line — while dropping the requirement that everyone install the same thing on their own machine.
- Line-item budgets with planned versus actual, rolled up by category and period.
- Shared across a household or a team, with each member’s access governed centrally.
- Web application, no install, no data locked to one computer.
Sign-in and entitlements are handled by sysidm.
Open ioBudget
Multi-tenant content management
sMarked is the publishing platform behind this page and behind every domain in the EAFX portfolio. One deployment serves many sites: each tenant gets its own host record, its own article tree, its own asset directory and its own access control, while the rendering pipeline, the API and the security posture stay identical everywhere.
- One application, many domains — tenancy resolved per request, with a deliberate default host for names that are not yet configured.
- Per-article access levels, per-host asset isolation, and an authenticated API for programmatic publishing.
- Content is normalised on the way out, so a page cannot smuggle in markup that breaks the layout it is embedded in.
Sign-in and entitlements are handled by sysidm.
Open sMarkedWhat this list means going forward
Each product here was built on sysidm rather than alongside it. That is the point: the second application cost less to secure and to bill for than the first, and the third will cost less than the second.
The list will grow. New products join it at the same layer, inheriting identity and payment on day one instead of acquiring them later as a retrofit.