Hanzo Authz

Fine-grained authorization engine. Zanzibar-style relationship graph for production scale. Move permission checks out of your code and into a single source of truth.

Relationship-based access

Zanzibar-style relationship graph. Model real-world permissions: documents own folders, folders own teams, teams own users.

Sub-10ms checks

Distributed cache with consistent snapshots. Authorization decisions at the speed of database reads, not API calls.

Schema as code

Define object types, relations, and permissions in a typed schema. Version-controlled, tested, and migration-safe.

Fine-grained policies

Per-resource, per-relation authorization. No more coarse role-bucketing. Express exactly who can do what.

Full audit trail

Every check, every write, every schema change. Immutable log for compliance and incident review.

Reverse lookup

Ask the inverse question: which resources can this user access? Native list-objects API for filtered views.

Get started with Authz

Open source

License: Apache-2.0hanzoai/authz

Get Authz

Fine-grained authorization