Give your customers, vendors, employees and project guests a branded /portal with only the data they should see — invoices, orders, bills, payslips, leave applications, project boards and shared documents — isolated from internal /app routes by row-level security.