The CMS your team can’t break

Rewrite this page. Every word on it is live, no admin panel required. Hit publish when you’re done and see how far you get.

23 years in the industryDurham, NC and remoteBuilt for teams, not just owners
You are editingNo changes yet
  1. Click any text and type over it.
  2. Swap the photo further down, then try to publish it with no alt text.
  3. Change who you are and watch parts of the page lock.
  4. Build a page by dragging sections onto a blank one.

Nothing you do here reaches my site. Your changes stay in this browser.

Who can edit whatDecided per content element
Someone else editingYou see their name
Image with no alt textPublish refused
Every saveKept as a version
A visitor sees itIn about 5 seconds

The page builder

Need a new page? Drag the sections in.

Need a new page? Tap to add sections.

You get a menu of sections I've designed for your site. Drop them onto a blank page, put them in any order, pick light or dark or which side the image sits on, then click in and write. Nobody's nudging pixels, so every page you build still looks like the rest of the site.

You get a menu of sections I've designed for your site. Add them to a blank page, reorder them, pick light or dark or which side the image sits on, then tap in and write. Nobody's nudging pixels, so every page you build still looks like the rest of the site.

Sections

Hero
Text band
Columns
Quote
Call to action

Drag a section onto the page, or press Add. Nothing here is saved.

Tap Add to drop a section onto the page. Nothing here is saved.

A blank page. Drop a section here.

Images

Swap the photo. Then try to publish without alt text.

Most systems let you publish an image nobody using a screen reader can understand. Tiffin refuses.

No alt text yet

Required, because someone using a screen reader gets this instead of the photo. Tiffin writes the suggestion; you decide whether it's right.

Go go gadget permissions

Change who you are. Watch the page change with you.

This is the part a website builder can't do. One permission check decides who may edit each content element, and the same check runs again on the server, so the buttons and the rules can never disagree.

You can edit everything on this page, and take over a content element somebody else is editing.

Center A

Your center's own page

A director can write here, because this content element belongs to their center. Try it, then switch to Member.

Center B

Another center's page

Same site, different center. A director of Center A can read this and nothing more. The server agrees.

The audit log

Everything you just did, written down

Who changed what, and when, with the before and after kept for every save. When a page is wrong on a Monday morning, this is the difference between knowing and guessing.

Activity0 entries
  1. Nothing yet. Change something on the page and it shows up here.

What it does

What's holding this together

Everything above, you did on your own. These are the parts that keep it predictable once your whole team has a login and the site is already live.

A page builder

Pick from a menu of sections designed for your site, drag them onto a blank page and write. Every new page matches the rest of the site, because nobody's placing anything by hand.

One permission check

One function decides who sees the Edit button and who gets to save. They can't drift apart. That's how most custom setups leak.

Drafts, and a visitor's eye view

Your draft is yours until you publish it. Everyone else, logged out included, still sees the published version, and "preview as visitor" shows you exactly what they get.

Every version kept

Every save, publish and restore is stored with its author and the time in Eastern. Restore an old one as a draft, read it, then publish it normally.

Two people, one content element

Editing takes a lock on that content element. Everyone else sees "Dana is editing" and their edit buttons gray out. A lock whose owner closed their laptop expires on its own, and an admin can clear one in a click.

Nobody overwrites anybody

Your editor remembers the version it opened. If somebody saved first, your save is refused with "someone else saved a newer version" and a reload button. Nothing goes missing without you being told.

Alt text, enforced

Publishing is refused while any image in the draft has no alt text. Not a warning you can click past. For anyone taking federal money, that's a requirement.

Paste that can't break the page

Paste from Word and the formatting is dropped, with a note saying what went. A heading has no line break in it at all, so nobody can snap your layout in half with the Enter key.

The page updates itself

Open pages check for new content every few seconds while you're looking at them, and stop when you walk away. Publish something and a visitor reading it sees it in about five seconds.

The flow

What happens when you hit publish

01

You click Edit

That takes the lock on that content element. Anybody else sees your name on it and can't edit it until you publish. The rest of the page stays open to them.

02

You save a draft

Nothing autosaves. Your draft is stored as a new version, and visitors keep seeing the published page.

03

You check it as a visitor

One click shows you the published-only view, so you can see what everyone else sees before you commit.

04

You publish

The draft becomes the live version in one statement, with an audit row. If an image is missing alt text, this is where it stops.

05

The lock goes back

Your lock is released and anyone reading the page sees your change within about five seconds, without reloading.

Questions

What people ask about Tiffin

Do I get Tiffin with a website build?
Yes. It comes with the site, and adding another editor costs nothing extra. Everything you just used on this page runs today: role-scoped editing, drafts, versions, check-out locks and the audit log, all covered by browser tests.
Why not just use WordPress or Squarespace?
Because you'd be assembling somebody else's layouts and hoping the page still looks like your brand. Most people tell me they hate using it, and the rest find it confusing at best. Here the sections were designed for your site, so a page you build yourself still looks like the one I designed. With more than one editor you also get who may change which page, and proof of who changed what. That's the part I kept rebuilding for clients, so I built it properly once.
What happens if two people edit the same thing?
The first one takes a lock on that content element, and everyone else sees their name and can't save over them. If somebody closes their laptop mid-edit, the lock expires on its own. A save against an older version is refused, so nobody's work disappears without a word.
Can I get back something somebody deleted?
Yes. Every save, publish and restore is kept with its author and time. You open the versions list, restore the one you want as a draft, read it to be sure, then publish it like any other change.
Do my editors need training?
You just used it, so judge for yourself. The whole idea is that editing happens in the page rather than in an admin screen that looks nothing like the site. I still record a walkthrough and leave you a written guide.
Does it work for a university center?
That's who I built it for. Content is scoped per center, so a director edits their own program and nobody else's, an admin sees everything, and the audit log answers the question your communications office actually asks, which is who changed this and when.
What does it cost?
Tiffin is part of a build, so it's quoted with the site and there is no separate subscription. The small recurring fee that covers hosting, backups and support covers the CMS too, and there's no per-seat charge for adding another editor.

Want this on your own site?

Twenty-five minutes. Tell me who needs to publish, what they keep getting stuck on, and I'll tell you whether this is the right fit or whether something simpler would do.

Make a change on the page first