What Sheetward is built on
You don't need this page to use Sheetward — but when your IT team asks what the platform runs on, here's the answer. The hosted platform is a classic three-tier web application. The screens run in your browser, one service checks every rule, and each app's data is kept on its own. You install nothing — everything below the browser is operated for you.
| Layer | Built with | What it does for you |
|---|---|---|
| Your browser | React + TypeScript | Forms, tables and dashboards draw locally, so everyday work feels instant. |
| Protective front door | Cloudflare | Every connection is encrypted (HTTPS); attack and bot traffic is filtered out before it reaches the application. |
| The rule-keeper | FastAPI (Python) | One service checks sign-in, roles, validation rules, formulas, conversions and imports on every request — never only in the browser. |
| Record storage | PostgreSQL (SQLite in self-hosted setups and standalone apps) | Each app's data is fenced off by row-level security, so one app can never read another's records — even in the same workspace. |
| File storage | S3-compatible cloud storage | Attachments and backups, downloaded through short-lived signed links that expire after a short time. |
| Support & email | AWS Bedrock + built-in email | The AI Support Assistant (on plans that include it), plus invites, alerts and verification messages. |
The whole Sheetward interface — a single-page app that renders forms, tables and dashboards locally
TLS (HTTPS) everywhere, with DDoS and bot protection before requests reach the application
The only door to your data — sign-in, roles, validation rules, formulas and imports are all enforced here
Isolated per app — records & lookup tables
Attachments & backups, served via short-lived signed links
Support Assistant for answering questions
Invites, alerts and verification mail
- In your browser. Everything you see — forms, tables, dashboards — is a React + TypeScript app that draws right in your browser, so day-to-day work feels instant.
- A protective front door. All traffic passes through Cloudflare first: every connection is encrypted (HTTPS), and attack and bot traffic is filtered out before it ever reaches Sheetward.
- One door to your data. A single FastAPI (Python) service handles every request. Sign-in, roles, validation rules, formulas, conversions and imports are all checked here — never only in the browser. So nobody can slip past your rules with a clever request.
- Each app's data fenced off. Records live in PostgreSQL, and row-level security keeps every app's data separate — your expense app can never read your payroll app's records, even inside the same workspace. (Self-hosted setups and standalone apps keep each app in its own SQLite file instead.)
- Files kept separately. Attachments and backups go to S3-compatible object storage, not the database, and are downloaded through private links that expire after a short time.
- Support & email built in. The AI Support Assistant runs on AWS Bedrock (on plans that include it); invites, alerts and verification emails are sent for you — nothing to set up.