Company is the tenant. User type company links to Company model. Dashboard requires canAccessDashboard() (approved + active). Card payments require canAcceptPayments() (Finix onboarding complete + merchant id).
SaaS subscription via Finix plans; check.company.subscription on selected mutating routes when FINIX_SUBSCRIPTION_CHECK is true.