MSP White-Label Add-On

• Partner Portal shell — favicon, product name, header logo, and accent color in the MSP Portal and inside every managed tenant you Enter via fn_enter_msp_tenant.
• Transactional emails — invites, tenant provisioning, in-app notification digests (bell + email), approver pings across all 8 staged workflows, and Trust Portal access-request magic links. From-name, reply-to, header logo, accent color, body product-name, and the "Powered by Rhindon" footer all swap (or hide).
• Branded DOCX / XLSX / CSV exports — the canonical RhindonCyber_… filename prefix is swapped for your slugified product name (e.g. AcmeCyberCo_QBR_2026-06-05.docx). Covers the Partner QBR today; remaining partner-facing reports adopt the swap as call sites are migrated.

Default behavior is one brand kit per MSP firm applied to all managed tenants. For agencies that operate distinct sub-brands per client, the per-client override section on the same page lets you override any field of the brand kit (logo, favicon, product name, colors, email sender, etc.) for a specific tenant. Empty fields fall back to the firm-wide brand; the firm-wide brand falls back to the Rhindon default.

1. Visit /partnerportal/billing and click Buy White-Label Add-On. This launches a Stripe Checkout for the recurring $99/mo subscription.
2. On successful payment the stripe-webhook handler grants the msp_white_label overlay for your firm and unlocks the brand-management page.
3. Configure your firm-wide kit (logo, favicon, colors, email sender) on /partnerportal/white-label. Optionally add per-client overrides.

Each successful invoice.payment_succeeded webhook extends the overlay expiry by +1 month (from the later of now or current expiry — no compression on back-to-back invoices). If a renewal fails the overlay deactivates and the page locks; exports revert to RhindonCyber_ and emails revert to Rhindon branding automatically.

The SMTP envelope sender stays [email protected] because the domain is Resend-verified with SPF + DKIM. The from-name, reply-to, logo, accent color, and body product-name all swap to your brand. Custom domains, custom DKIM, and per-MSP subdomain branding are out of scope for v1.

The add-on owns 8 audit codes in the msp_white_label family. Every brand mutation is mirrored to both the firm's org-scoped activity log and the platform-wide audit log.

• MSP_WHITE_LABEL_CHECKOUT_STARTED
• MSP_WHITE_LABEL_OVERLAY_GRANTED
• MSP_WHITE_LABEL_OVERLAY_CANCELED
• MSP_WHITE_LABEL_OVERLAY_REFRESHED_FROM_STRIPE
• MSP_BRAND_UPDATED
• MSP_BRAND_ASSET_UPLOADED
• TENANT_BRAND_OVERRIDE_UPDATED
• TENANT_BRAND_OVERRIDE_CLEARED

• Custom domains, CNAME, SSL, or DKIM/SPF on partner domains.
• Per-tenant invoice branding (Stripe-hosted invoices stay Rhindon-styled).
• Multi-brand portfolio (one brand kit per firm + per-client overrides).