PartnersWatch
White-label

White-label to the core, not just a logo swap

Give every partner, branch, or franchise its own branded home — theme, custom domain, emails, and documents — on one multi-tenant platform where branding never widens access.

Theme · Custom domains · Email · Documents · Brand API

partnerswatch.com/admin/settings/branding
Settings /Branding
N
Brand theme Live
Acme Coffee — Partner Hub
Palette
Logo & faviconAClogo.svg
Domain partners.acme.coffee
Live preview · partner portal
ACAcme Coffee PartnersNew order
Welcome back, Riverside Café
This month
$18.4k
Royalty due
$1,104
Open orders
7
Autumn blend playbook · launches Oct 1
No PartnersWatch chrome — 100% the partner's brand.
Any partner network

One platform behind the scenes, their front door out front

White-label isn't a SaaS-only feature. A software reseller, a coffee-shop franchisee, a university campus, or an insurance broker each gets a home that looks like theirs — while you run one multi-tenant system underneath.

Theming

Their brand, applied everywhere — no code

Set a partner or branch's palette, logo, and favicon once. Every surface they touch re-skins instantly — configured from settings, versioned, and previewed live before it ships.

  • ✓Per-tenant colors, logo, favicon
  • ✓Configured in settings — no builds, no forks
  • ✓Live preview before you publish the theme
partnerswatch.com / admin / settings / branding
Brand theme
Acme Coffee — Partner Hub
Live
Palette#3f2a1e#c98a3f#faf6f0
Logo & faviconAClogo.svg · favicon.ico
Preview
ACAcme Coffee PartnersDealsPayoutsNew order
Custom domains

Every partner on their own domain

Point a partner's own subdomain at PartnersWatch. The host is verified before it resolves, TLS is issued and auto-renewed, and CORS grants match the same verified host — so a custom domain is a front door, never a back door.

  • ✓Bring-your-own domain, verified before it resolves
  • ✓Automatic TLS with auto-renew
  • ✓CORS scoped to the verified host — isolation holds
partnerswatch.com / admin / settings / domains
partners.acme.coffee Verified
TypeHost / valueCopy
CNAMEpartners → partnerswatch.com
TXT_pos-verify → pos-verify=7fa3…c1
TLS certificate Active · auto-renew
CORS grantscoped to verified host
Host resolution resolves tenant only
End to end

Branded on every surface, not just the login

The brand follows the partner through every touchpoint — the portal, the emails, the documents, and the domain those all live on.

Partner portal

The whole portal UI carries the partner's colors, logo, and favicon.

Transactional email

Invites, notifications, and payout receipts send from the partner's look and, optionally, their domain.

Documents & agreements

Generated agreements and materials render under the partner's brand in the app.

Login & favicon

Sign-in screens, favicons, and browser tab titles are branded — no PartnersWatch chrome leaks through.

Sender domain (DKIM)

Bring your own SMTP and DKIM keys — encrypted at rest — so email authenticates as the partner.

Brand API

Your own product fetches each partner's approved brand and renders under it.

Branches & franchises

Every location gets its own space, isolated from the rest

Franchisees, campuses, and sub-partners each run on their own branded domain, sealed off from siblings. Roll-up reporting stays with the operator at the top.

tenant

Coffee franchise

acme.coffee partners.acme.coffee

Every franchisee gets their own branded hub for orders, royalties, and playbooks — isolated from sibling units, rolled up to the brand.

tenant

University with campuses

university.edu campus.university.edu

Each campus runs enrollments and referral partners on its own branded space; the system office sees the whole network.

tenant

Agency network

agency.com portal.agency.com

Delivery and referral partners log into an agency-branded portal — the end client never sees a third-party tool.

Brand API

Or put their brand inside your product

When a partner resells your product, your product should wear their brand. Fetch the approved palette, logo, and name for any partner with a scoped machine key, and drive deals, customers, and documents through the same API.

Open the API docs
brand.sh
curl https://partnerswatch.com/api/v1/partners/$PARTNER_ID/brand \
  -H "Authorization: Bearer $POS_KEY"

{ "brandName": "Acme Coffee",
  "primaryColor": "#3f2a1e",
  "logoUrl": "https://…/logo.svg" }
Approved brands only · scoped key required
Trust

Branding that can't widen access

Every white-label surface is bound to a verified tenant. The safe path is the only path — you can't brand your way into someone else's data.

Security & RBAC

Verified-host resolution

A custom domain only resolves once its host is verified, and CORS grants match the same host — so branding can never widen access.

Encrypted BYO credentials

SMTP passwords and DKIM keys are AES-256-GCM encrypted at rest, masked on return, and never logged.

Isolated by construction

Each partner, branch, or franchise is a tenant; every query is scoped to its org in the data layer, not the UI.

Ready to run your partner program in one place?

Book a walkthrough and see recruitment, PRM, automation, payouts, CX, and dashboards working together — on one platform.