Multi-Tenant Workflow Automation

Build.
Automate.
Scale.

BCON is an enterprise-grade visual workflow platform that connects your services, data, and AI — no code required.

22+
Node Types
∞
Workflows
AWS
Powered
RT
Execution
Explore
// platform overview

Everything your
team needs to automate

A visual, node-based editor that lets your teams build, run, and monitor automated workflows connected to any service.

⚡
Visual Editor
Drag-and-drop node canvas with real-time execution feedback, presence awareness, and live socket events.
🔗
Deep Integrations
AWS S3, Lambda, Bedrock AI, PostgreSQL, any HTTP API, and custom JavaScript — all in one workflow.
🏢
Multi-Tenant
Full org → workspace → project hierarchy with role-based access control and data isolation per organisation.
🤖
AI-Ready
AWS Bedrock integration with Claude, Llama, Mistral and more. Structured JSON output via tool-use mode.
📊
Execution History
Every workflow run is recorded with node-level results, logs, timing, and real-time socket streaming.
🔒
Enterprise Security
AWS Cognito identity, AES-256 encrypted credentials, row-level org isolation, and full audit logs.
// node library

A growing library
of node types

Connect any service. Process any data. Control any flow.

Trigger
Webhook
Start workflows from any HTTP request. Supports GET/POST/PUT/PATCH/DELETE with auth, custom paths.
HTTP Trigger
Trigger
PostgreSQL Trigger
Fire workflows on INSERT, UPDATE, or DELETE events using native LISTEN/NOTIFY.
DB Event
Core
HTTP Request
Call any external REST API with full auth, headers, query params, and JSON/form bodies support.
Outbound HTTP
Core
OAuth2
Fetch access tokens using client credentials, password, or authorization code flows. Token caching built in.
5 Grant Types
Core
Code
Run custom JavaScript in an isolated V8 sandbox. Async/await support, fetch available. 5s timeout.
Sandbox VM
Terminal
Respond to Webhook
Send a custom HTTP response with full control over status code, headers, and response body.
HTTP Response
Terminal
Error / Stop
Halt execution intentionally with a plain message or structured JSON. Sets status to Stopped.
Guard Clause
Flow Control
IF
Evaluate conditions with AND logic and branch to True or False paths.
Conditional
Flow Control
Switch
Multi-case routing. Each case becomes its own branch. Default handles unmatched cases.
Multi-Branch
Flow Control
Merge
Combine data from multiple branches into a single output. Supports append and field-matching modes.
Combine Branches
Flow Control
Loop
Iterate over any array — fires loop-body once per element, then done after all iterations complete. Supports exit conditions and max iteration caps.
Array Iteration
AWS
AWS S3
Full bucket and file management: upload, download, copy, delete. All fields support {{expressions}}.
Object Storage
AWS
AWS Lambda
Invoke any Lambda function synchronously with a JSON payload. Results flow into the next node.
Serverless
AWS
AWS Bedrock
Generate text or structured JSON with Claude, Llama, Mistral, Cohere, and Titan models.
Foundation Models
Database
PostgreSQL Action
SELECT, INSERT, UPDATE, DELETE, UPSERT, or raw SQL. Schema/table autocomplete.
CRUD + SQL
Processing
Extraction
Parse file buffers: PDF, CSV, JSON, XML, XLS, XLSX, and Base64. JSONPath and page range support.
PDF / CSV / JSON…
Core
Convert to File
Convert JSON data to CSV, HTML table, or JSON file. Returns a buffer ready for S3 upload or HTTP response.
CSV / HTML / JSON
Email
Postmark
Send transactional emails, manage bounces, and track delivery.
Send / Track / Bounces
Email
SendGrid
Send transactional and marketing emails via the SendGrid API. HTML or plain text with expression support.
Email API
SMS
Twilio
Send SMS messages via the Twilio API. E.164 phone numbers, dynamic bodies, full expression support.
SMS API
SMS
ClickSend
Send SMS with optional scheduling, custom sender IDs, and delivery tracking via the ClickSend API.
SMS / Scheduled
Messaging
WhatsApp
Send WhatsApp messages via the Meta WhatsApp Business API. Dynamic phone numbers loaded from credential.
WhatsApp Business
// ai-powered

Build and test
faster with AI

Two built-in AI tools that eliminate the blank-canvas problem and make your workflows bulletproof before you ship.

✦ AI Workflow Generator

Describe it.
We build it.

Type a plain-English description of what you want to automate. BCON's AI generates a complete workflow — nodes, edges, names — and drops it straight onto your canvas.

✦
Generate Workflow with AI
Describe what you want to automate
Webhook → S3 → HTTP notify Postgres trigger → Lambda → respond
Receive a webhook, classify the document with Bedrock AI, save result to Postgres, then respond 200 OK|
Ctrl+Enter to generate
✦ Generate
✓
Document Classifier Pipeline
Webhook → Bedrock AI → IF → Postgres + Respond
⬡ AI Test Case Generator

Describe a scenario.
Get a payload.

Define a test scenario in plain English. BCON reads your workflow's node structure and generates a realistic JSON payload to trigger and validate your workflow end-to-end.

⬡
New Test Case
Define a payload to test this workflow
Describe what to test
An inactive user with a missing email field|
⬡ Generate via AI
Payload (JSON)
{
  "userId": "usr_7f3k2",
  "status": "inactive",
  "email": null,
  "role": "member"
}
// interactive tutorial

Build workflows
in minutes

Watch how BCON works — drag nodes from the panel, connect them on the canvas, then hit Run and watch your AI-powered workflow execute in real time.

1 Drag Nodes
──
2 Connect
──
3 Run
──
4 AI Executes
AI Document Processor — BCON Canvas
100%
⊞ Fit
// nodes
Triggers
Webhook
AI / AWS
Bedrock AI
Flow Control
IF Condition
Database
Postgres
Core
Respond
Code Node
HTTP Request
Webhook
POST /api/docs
Trigger
✓
Bedrock AI
Claude 3.5 Sonnet
AI Agent
✓
IF Condition
{{ai.category}}
Branch
✓
Postgres
INSERT record
Action
✓
Respond
200 OK · {{result}}
Terminal
✓
TRUE
FALSE
Drag nodes from the panel onto the canvas
Connect nodes by dragging between handles
Click ▶ Run to start execution
AI agent processing your workflow in real-time…
✓ Workflow completed successfully

Live at bcon.healthfirsttech.com

// access control

Role-based access
at every level

Org → Workspace → Project hierarchy with fine-grained permissions. Every action is logged.

🏢
Org Admin
admin
  • Org stats & member management
  • Workspace oversight
  • Workflow monitoring
  • Credential management
  • Audit log access
👤
Member
workspace_member
  • Dashboard & personal workspace
  • Workflows, executions, credentials
  • Workspace Admin: add/remove members
  • Assign workflow permissions
  • Feature-gated access (view/full)
// security & compliance

Built secure
by default

Enterprise identity, encrypted secrets, sandboxed code execution, and complete audit trails.

🔑
Identity & Auth
  • → AWS Cognito manages all passwords & MFA
  • → Cognito access + refresh tokens (no custom JWT)
  • → Token auto-injected via HTTP interceptor
  • → 15-minute expiring invite links with short codes
  • → Single-use invites — code invalidated on register
🗄
Data Isolation
  • → TypeORM subscriber auto-scopes queries by orgId
  • → Cross-org writes throw ForbiddenException
  • → AsyncLocalStorage seeds request context per-request
  • → Credentials encrypted via AWS KMS envelope encryption (AES-256-GCM with per-credential data keys)
  • → Secrets never returned by API (write-only)
🏖
Code Sandbox
  • → isolated-vm V8 sandbox — no Node.js API access
  • → 5-second execution timeout
  • → 64 MB memory limit enforced
  • → No fs, process, require — only fetch + console
  • → Console output captured to _logs field
📋
Audit & Access
  • → Full org-level audit log via /admin/audit-logs
  • → Route guards: authGuard, orgAdmin, superAdmin, feature
  • → /access-denied page with contextual messaging
  • → SQL injection prevention via quoteIdent()
  • → Postgres loop guard prevents self-triggering cascades
// why bcon

Built different,
by design.

BCON isn't just another workflow runner. Six architectural decisions that separate it from everything else.

vs. app-layer RBAC filters
🏗
Database-Level Multi-Tenancy
Most multi-tenant tools rely on service-layer filters that can be bypassed. BCON enforces org isolation at the TypeORM subscriber level — every INSERT, UPDATE, and DELETE is automatically scoped, with cross-org writes throwing a hard exception.
vs. interval-based DB polling
⚡
PostgreSQL Native LISTEN/NOTIFY
Other tools poll your database on a timer. BCON uses PostgreSQL's native LISTEN/NOTIFY protocol — zero latency, zero overhead, real-time event delivery the instant a row changes.
vs. generic AI prompting
🧠
AI That Reads Your Canvas
Generic AI tools generate guesses. BCON's AI reads your actual node configurations and every {{expression}} reference on the canvas to produce test payloads that precisely match what your workflow expects.
vs. generic HTTP adapters
☁️
AWS-Native, Not Adapter-Based
Other platforms wrap AWS behind a generic HTTP node. BCON ships first-class AWS SDK integrations for S3, Lambda, and Bedrock — typed operations, IAM credential vaulting, and structured AI output via tool-use mode.
vs. full Node.js process access
🔒
Sandboxed V8, Not Shell Access
Most code nodes give user scripts full Node.js process access — a security risk in any multi-tenant environment. BCON runs JavaScript inside an isolated V8 VM: no fs, no require, 5-second timeout, 64 MB memory cap.

Ready to
automate
everything?

BCON is live in production. Connect your services today.

https://bcon.healthfirsttech.com