Multi-Tenant Workflow Automation

Build.
Automate.
Scale.

BCON is an enterprise-grade visual workflow platform that connects your services, data, and AI — no code required.

16+
Node Types
∞
Workflows
AWS
Powered
RT
Execution
Explore
// platform overview

Everything your
team needs to automate

A visual, node-based editor that lets your teams build, run, and monitor automated workflows connected to any service.

⚡
Visual Editor
Drag-and-drop node canvas with real-time execution feedback, presence awareness, and live socket events.
🔗
Deep Integrations
AWS S3, Lambda, Bedrock AI, PostgreSQL, any HTTP API, and custom JavaScript — all in one workflow.
🏢
Multi-Tenant
Full org → workspace → project hierarchy with role-based access control and data isolation per organisation.
🤖
AI-Ready
AWS Bedrock integration with Claude, Llama, Mistral and more. Structured JSON output via tool-use mode.
📊
Execution History
Every workflow run is recorded with node-level results, logs, timing, and real-time socket streaming.
🔒
Enterprise Security
AWS Cognito identity, AES-256 encrypted credentials, row-level org isolation, and full audit logs.
// node library

A growing library
of node types

Connect any service. Process any data. Control any flow.

Trigger
Webhook
Start workflows from any HTTP request. Supports GET/POST/PUT/PATCH/DELETE with auth, custom paths.
HTTP Trigger
Trigger
PostgreSQL Trigger
Fire workflows on INSERT, UPDATE, or DELETE events using native LISTEN/NOTIFY.
DB Event
Core
HTTP Request
Call any external REST API with full auth, headers, query params, and JSON/form bodies support.
Outbound HTTP
Core
Code
Run custom JavaScript in an isolated V8 sandbox. Async/await support, fetch available. 5s timeout.
Sandbox VM
Terminal
Respond to Webhook
Send a custom HTTP response with full control over status code, headers, and response body.
HTTP Response
Terminal
Error / Stop
Halt execution intentionally with a plain message or structured JSON. Sets status to Stopped.
Guard Clause
Flow Control
IF
Evaluate conditions with AND logic and branch to True or False paths.
Conditional
Flow Control
Switch
Multi-case routing. Each case becomes its own branch. Default handles unmatched cases.
Multi-Branch
Flow Control
Merge
Combine data from multiple branches into a single output. Supports append and field-matching modes.
Combine Branches
AWS
AWS S3
Full bucket and file management: upload, download, copy, delete. All fields support {{expressions}}.
Object Storage
AWS
AWS Lambda
Invoke any Lambda function synchronously with a JSON payload. Results flow into the next node.
Serverless
AWS
AWS Bedrock
Generate text or structured JSON with Claude, Llama, Mistral, Cohere, and Titan models.
Foundation Models
Database
PostgreSQL Action
SELECT, INSERT, UPDATE, DELETE, UPSERT, or raw SQL. Schema/table autocomplete.
CRUD + SQL
Processing
Extraction
Parse file buffers: PDF, CSV, JSON, XML, XLS, XLSX, and Base64. JSONPath and page range support.
PDF / CSV / JSON…
Core
Convert to File
Convert JSON data to CSV, HTML table, or JSON file. Returns a buffer ready for S3 upload or HTTP response.
CSV / HTML / JSON
Email
Postmark
Send transactional emails, manage bounces, and track delivery.
Send / Track / Bounces
// ai-powered

Build and test
faster with AI

Two built-in AI tools that eliminate the blank-canvas problem and make your workflows bulletproof before you ship.

✦ AI Workflow Generator

Describe it.
We build it.

Type a plain-English description of what you want to automate. BCON's AI generates a complete workflow — nodes, edges, names — and drops it straight onto your canvas.

✦
Generate Workflow with AI
Describe what you want to automate
Webhook → S3 → HTTP notify Postgres trigger → Lambda → respond
Receive a webhook, classify the document with Bedrock AI, save result to Postgres, then respond 200 OK|
Ctrl+Enter to generate
✦ Generate
✓
Document Classifier Pipeline
Webhook → Bedrock AI → IF → Postgres + Respond
⬡ AI Test Case Generator

Describe a scenario.
Get a payload.

Define a test scenario in plain English. BCON reads your workflow's node structure and generates a realistic JSON payload to trigger and validate your workflow end-to-end.

⬡
New Test Case
Define a payload to test this workflow
Describe what to test
An inactive user with a missing email field|
⬡ Generate via AI
Payload (JSON)
{
  "userId": "usr_7f3k2",
  "status": "inactive",
  "email": null,
  "role": "member"
}
// interactive tutorial

Build workflows
in minutes

Watch how BCON works — drag nodes from the panel, connect them on the canvas, then hit Run and watch your AI-powered workflow execute in real time.

1 Drag Nodes
──
2 Connect
──
3 Run
──
4 AI Executes
AI Document Processor — BCON Canvas
100%
⊞ Fit
// nodes
Triggers
Webhook
AI / AWS
Bedrock AI
Flow Control
IF Condition
Database
Postgres
Core
Respond
Code Node
HTTP Request
Webhook
POST /api/docs
Trigger
✓
Bedrock AI
Claude 3.5 Sonnet
AI Agent
✓
IF Condition
{{ai.category}}
Branch
✓
Postgres
INSERT record
Action
✓
Respond
200 OK · {{result}}
Terminal
✓
TRUE
FALSE
Drag nodes from the panel onto the canvas
Connect nodes by dragging between handles
Click ▶ Run to start execution
AI agent processing your workflow in real-time…
✓ Workflow completed successfully

Live at qa.healthfirsttech.com

// access control

Role-based access
at every level

Org → Workspace → Project hierarchy with fine-grained permissions. Every action is logged.

🏢
Org Admin
admin
  • Org stats & member management
  • Workspace oversight
  • Workflow monitoring
  • Credential management
  • Audit log access
👤
Member
workspace_member
  • Dashboard & personal workspace
  • Workflows, executions, credentials
  • Workspace Admin: add/remove members
  • Assign workflow permissions
  • Feature-gated access (view/full)
// security & compliance

Built secure
by default

Enterprise identity, encrypted secrets, sandboxed code execution, and complete audit trails.

🔑
Identity & Auth
  • → AWS Cognito manages all passwords & MFA
  • → Cognito access + refresh tokens (no custom JWT)
  • → Token auto-injected via HTTP interceptor
  • → 15-minute expiring invite links with short codes
  • → Single-use invites — code invalidated on register
🗄
Data Isolation
  • → TypeORM subscriber auto-scopes queries by orgId
  • → Cross-org writes throw ForbiddenException
  • → AsyncLocalStorage seeds request context per-request
  • → Credentials AES-256-GCM encrypted at rest
  • → Secrets never returned by API (write-only)
🏖
Code Sandbox
  • → isolated-vm V8 sandbox — no Node.js API access
  • → 5-second execution timeout
  • → 64 MB memory limit enforced
  • → No fs, process, require — only fetch + console
  • → Console output captured to _logs field
📋
Audit & Access
  • → Full org-level audit log via /admin/audit-logs
  • → Route guards: authGuard, orgAdmin, superAdmin, feature
  • → /access-denied page with contextual messaging
  • → SQL injection prevention via quoteIdent()
  • → Postgres loop guard prevents self-triggering cascades

Ready to
automate
everything?

BCON is live in production. Connect your services today.

https://qa.healthfirsttech.com