Database
Turso
The per-tenant model and a merchant of record are complementary, because neither wants you keeping much billing data. A single control database maps a Polar customer to a tenant and the benefits granted to it, while every tenant database stays pure product data with no billing columns at all. That separation is also what makes edge replicas safe: the replicated data contains nothing about money and nothing requiring strong consistency.