Authentication
Choose how an application verifies users, establishes sessions, and recovers access.
- Default
- Choose Clerk for most new SaaS products.
Developer decision index
Compare the tools that actually belong in the same decision. See the default choice, the trade-offs, and the conditions that should change it.
Task→Default route→Alternatives→Starter stack
Start here
Choose how an application verifies users, establishes sessions, and recovers access.
Choose the seller and funds-flow operating model, then select a direct payment processor or hand off to Merchant of Record or Marketplace Payments.
Choose the authoritative system of record by data shape, access patterns, integrity, recovery, and operating constraints.
Choose where an application runs by runtime, process, state, networking, region, and operating ownership.
Choose a provider and operating model for application-triggered email without confusing delivery infrastructure with marketing automation.
Choose a model-provider evaluation set through measured task quality, required capabilities, governance, lifecycle, and total workload cost.
Decision map
Users, access, and permissions
Storage, search, and synchronization
Hosting, compute, and delivery
Payments, billing, and tax
Email, notifications, and chat
Models, agents, and AI delivery
Errors, logs, and performance
Protection, controls, and compliance
Feedback, content, and onboarding
Code, testing, and delivery
Working combinations
Use this Stack when AI is a product capability inside a conventional SaaS system rather than a standalone model-research platform.
The stack accelerates product delivery but combines identity, database, billing, model, SDK, and hosting dependencies whose usage costs and failure modes must be measured independently.
Use this Stack when customer organizations, enterprise federation, provisioning, operational workflows, and account-level billing are core product requirements.
The stack covers common enterprise SaaS infrastructure quickly, but the team must own cross-system identity mapping, tenant isolation, authorization, event consistency, enterprise support, and vendor migration.
Use this Stack when editors need a managed structured-content system and the product needs a custom Next.js frontend, dedicated search, global delivery, and managed deployment.
The Stack accelerates content operations and delivery but distributes data, indexing, cache, and runtime state across managed providers whose usage, failure, and migration boundaries must be operated deliberately.
Use this Stack when a small team wants a conventional SaaS foundation, prefers application-owned authentication, and values outsourcing seller-of-record operations.
The stack can be economical and portable at small scale, but the developer assumes more authentication and integration responsibility and must validate runtime compatibility, MoR eligibility, database behavior, and migration paths.
Use this Stack when the product needs application authentication, relational data, card payments, transactional email, and managed web deployment without operating each subsystem.
The stack minimizes initial operations but concentrates product risk across several managed vendors and leaves the application responsible for domain data, authorization, tax scope, and migration planning.
Selected evaluations
Clerk is the strongest general default for a new SaaS team that values a short path to polished authentication more than infrastructure ownership.Read evaluation
Choose Better Auth when owning the authentication runtime, schema, and data is a requirement rather than an implementation preference.Read evaluation
Choose Stripe when direct payment infrastructure, subscriptions, or platform payments are intentional and the business will own the remaining merchant operations.Read evaluation
Choose Paddle when its eligibility, seller role, checkout, payout, tax, and contract model fit and reduced merchant operations outweigh lower platform control.Read evaluation
Choose Supabase when PostgreSQL, Auth, Storage, Realtime, and generated APIs belong in one coherent backend boundary.Read evaluation
Choose Neon when PostgreSQL compatibility, database branching, and elastic or suspendable compute align with the development workflow and workload.Read evaluation
Choose Vercel when framework-aware deployment, previews, and managed web delivery materially reduce team effort.Read evaluation
Choose Cloudflare when its edge runtime and integrated delivery, security, and data products match the application's execution and locality model.Read evaluation
Choose Resend when a compact developer API is the priority and the team can own consent, domain authentication, reputation, suppression, failure handling, and provider concentration.Read evaluation
Choose PostHog when suite consolidation is intentional and the team can govern identity, event taxonomy, replay capture, flag requests, retention, regions, and separate product meters.Read evaluation
Choose Sentry when application error triage is the leading job and the team can own SDK, release, source-map or symbol, sampling, and sensitive-data configuration.Read evaluation
Choose AI SDK when a TypeScript product benefits from shared application primitives and its supported provider adapters.Read evaluation
Editorial standard
A practical starting point when one route fits the common case.
The conditions that should move you away from the default.
Important claims trace back to current, reliable documentation.