Caisson vs MakerKit
MakerKit gives you Supabase RLS multi-tenancy you configure. Caisson gives you fail-closed RLS with the isolation tests and audit evidence an auditor asks for. Here is the honest line.
Which should you use?
Pick MakerKit for a mature, production-grade Next.js + Supabase kit: real multi-tenancy on Postgres RLS, MFA auth, a super-admin, and an MCP server your AI agent builds on, maintained full-time since 2022. Pick Caisson when you must prove that isolation to an auditor: it adds automated cross-tenant isolation tests, a WORM + hash-chained audit trail, per-tenant field encryption, and SOC 2 / HIPAA / EU AI Act evidence packs with OSCAL export. MakerKit gives you RLS; Caisson gives you RLS plus the evidence it holds.
What MakerKit is
Next.js / Supabase SaaS boilerplate. Facts below were read from makerkit.dev on 2026-07-07.
- Next.js 16 or React Router 7 on a Supabase-native stack (Auth, Storage, Database, RLS).
- Multi-tenancy (users across multiple organizations), MFA auth, a Super Admin with impersonation, Stripe / Lemon Squeezy / Paddle billing.
- An MCP server and agent rules for Claude Code / Cursor / Codex, Shadcn UI + Tailwind v4, i18n, Playwright E2E, React.Email.
- Maintained full-time since 2022 with 400+ pages of documentation.
An honest comparison
Where MakerKit has a capability, it is marked. Caisson is the compliance and tenant-isolation substrate; MakerKit wins the rows it wins.
| Detail | Caisson | MakerKit |
|---|---|---|
| Stack | Next.js + Postgres | Next.js / React Router + Supabase |
| Auth + MFA | ||
| Organization multi-tenancy | ||
| Postgres RLS | ||
| Fail-closed Postgres RLS + automated cross-tenant isolation tests | RLS, no shipped isolation tests | |
| WORM evidence store + append-only hash-chained audit trail | — | |
| SOC 2 / HIPAA / EU AI Act evidence packs + OSCAL export | — | |
| Per-tenant field encryption (envelope, per-tenant key) | — | |
| Detached evidence signing (Ed25519 + RFC-3161) | — |
What MakerKit is genuinely better at
A comparison that only flatters one side isn't worth reading. Here is what this kit does well.
MakerKit is not a weekend project: it has run in production since 2022 and ships genuine organization-based multi-tenancy enforced by Postgres RLS through Supabase, plus MFA and a super-admin. That is a strong, well-trodden foundation.
It ships an MCP server and curated agent rules so tools like Claude Code and Cursor extend the codebase along its intended patterns, a real advantage if AI-driven development is your workflow.
Where Caisson draws the line
The compliance and tenant-isolation substrate a launch kit leaves to you.
MakerKit gives you RLS to configure per table; a missed policy is a silent cross-tenant leak. Caisson's compliance-core ships an RLS-force evidence collector and isolation tests that attempt a cross-tenant read and assert it fails, every run, the difference between having RLS and proving it.
A WORM + hash-chained audit trail, per-tenant field encryption, detached evidence signing, and SOC 2 / HIPAA / EU AI Act packs with OSCAL export are Caisson's core and are not part of MakerKit's feature set.
Which should you pick?
You want a mature, AI-agent-friendly Next.js + Supabase kit with real multi-tenancy and are handling your own compliance story.
You need to prove tenant isolation with automated tests and produce SOC 2 / HIPAA evidence, not just enable RLS.
Build the product surface on MakerKit's Supabase stack and add Caisson's compliance-core, audit-worm, and field-crypto packages for the isolation tests and evidence an auditor requires.
One-time, own the source.
Caisson is a one-time perpetual license — the price never recurs, and it includes 12 months of updates from your purchase date, renewable per entitlement afterward at 40% of list per year. The Base substrate is Apache-2.0; the compliance modules are commercial.
Compliance bundle
$1,649, one-time. Fail-closed RLS, WORM, the audit chain, evidence packs, and the framework and signing carves — the whole substrate this comparison is about.
À la carte
Take a single module from $49 — audit-worm, field-crypto, or compliance-core on their own, onto your existing Postgres app.
Everything bundle
$2,259 covers every bundle and every à-la-carte module, plus the open base, in one purchase.
Common questions.
Doesn't MakerKit already have RLS? Why Caisson?
Is Caisson also a one-time purchase like MakerKit?
Can I use MakerKit and Caisson together?
Ship the compliant backend.
Explore the Compliance bundle, browse every module in the marketplace, or read another comparison.