Home About Services Work Blog FAQ Contact
All Case Studies

Sembr

Laravel 12 PostgreSQL Row-Level Security Stripe Connect Alpine.js Cloudflare R2

Chambers of commerce, trade associations and service clubs in the 75 to 400 member range are running on software built for somebody else. The established platforms sell by contract and price per member, so growing the organization costs it more. The alternative most small organizations actually use is a spreadsheet and a payment link.

The thing that kept surfacing in audits of real chambers was simpler and worse than pricing. The organization does not own its own data. Getting a clean member list out is a support ticket, and leaving is a project with a budget.

Sembr is built on one idea: the organization owns its own data. Every record belongs to a single organization and the database itself enforces that, rather than trusting each new query to remember. That was decided on the first day, because it is the one thing that cannot be retrofitted.

Dues and event payments run through Stripe Connect, so the money lands in the organization's own account instead of passing through ours. The member portal and the embeddable widgets run on the same interface the staff screens use, so there is no private channel only the vendor can reach.

Every change is written to an append-only, hash-chained log under a separate database role, so tampering is detectable rather than merely discouraged. Personal information never enters logs, commits or AI prompts, and a commit hook enforces that instead of a policy document asking politely. Exporting everything, as JSON, CSV and SQL, is a feature rather than a favour granted to a customer on the way out.

Sembr is in build, with early access open at sembr.co and pricing published up front: flat, no per-member fee, a discount for nonprofits.

Membership, dues and events with Stripe Connect are complete, along with a compliance pass covering data requests, erasure and export. Embeddable widgets and the member portal are live in the current version.

What remains is production hardening, an external penetration test and a restore that has actually been rehearsed. Membership software holds a community's contact list and its money, so the launch date follows that work instead of leading it.