Agencies

Multi-brand operations

If you manage multiple brands, regional sub-brands, or client domains, you need predictable routing and naming that scales without cross-brand interference. Nimriz makes each domain fully isolated by design.

  • Domain-bound slugs - same short code, completely different destinations per brand
  • Strict host matching - no apex/www aliasing, no cross-client collisions
  • Per-domain fallback configuration for root, not-found, and expired links
Domain-bound link isolation

The same slug exists independently under each client domain - no collision.

Strict host matching
brand-a.to
Client A domain
brand-b.to
Client B domain
brand-a.to/spring
brand-a.com/spring-launch
1.2k
clicks
brand-b.to/spring
brand-b.com/spring-sale
891
clicks
brand-a.to/app
apps.apple.com/brand-a
654
clicks
brand-b.to/app
play.google.com/brand-b
438
clicks
brand-a.to/spring and brand-b.to/spring are fully independent - same slug, different domains, different destinations, separate click records.

Agencies and multi-brand teams face a structural problem with most link shorteners: a single shared namespace means the same slug can only point to one destination, forcing teams into awkward naming conventions, separate accounts, or accepting that two campaigns on two brands will eventually collide. The workarounds compound over time - different slugs per brand, different accounts to manage, different dashboards to check - until the operational overhead outweighs the convenience of short links altogether.

Nimriz solves this at the architecture level. Short links are keyed by host and short code together, not by short code alone. That means brand-a.to/launch and brand-b.to/launch are fully independent records. They can point to different destinations, carry separate click histories, and be managed by different team members - all from the same workspace. You add a domain per brand, verify DNS ownership, and every link you create under that host is automatically scoped to it.

Strict host matching reinforces this isolation. Nimriz treats apex and www as separate domain records with no silent aliasing. Reserved system paths such as /_health, /api/*, and /.well-known/* stay outside the slug namespace regardless of what short codes you create. Managed-domain loop prevention blocks any attempt to shorten a URL back into a Nimriz-managed redirect host, preventing redirect chains from folding back on themselves. The result is a routing model that is explicit at every step: host resolution comes first, then slug lookup within that host, then domain-configured fallback if nothing matches.

Workspace roles let an agency or in-house team manage all brand domains under one login while keeping access appropriate by role. You can review teams and security to understand the fixed owner, admin, member, and viewer roles that control who can create links, manage domains, and see analytics across your portfolio. Custom domains are available on supported plans - see branded links and domains for the full feature detail.

Who it is for

Agency link operator

You manage short-link domains for multiple clients and need each client's slugs, analytics, and fallback pages kept entirely separate - without running separate Nimriz accounts.

House-of-brands marketer

Your company owns several distinct consumer brands, each with its own domain. You want consistent readable slugs like /sale or /app across every brand without namespace conflicts.

Regional or product-line marketer

You run regional sub-brands or product-line microsites on separate hosts. You need campaigns on each host to resolve independently so regional click data stays clean.

Growth or marketing ops lead

You are building a scalable link infrastructure that a distributed team can use across brands. You need workspace-level access controls so each team member sees and touches only what their role allows.

What you get

Domain-bound slug uniqueness

Short codes are unique per domain, not globally. That means brand-a.to/spring and brand-b.to/spring are fully independent records pointing to entirely different destinations, with separate click counts. Separate brands can reuse the same slug conventions without any risk of cross-brand collision.

Strict host matching

Host resolution happens before slug lookup, so routing stays explicit. Apex and www are treated as distinct domain records - example.com and www.example.com are separate entries with no silent aliasing between them. This means you always know which host resolved the redirect and there is no ambiguity about which brand a click belongs to.

Per-domain fallbacks

Each domain gets independent root, not-found, and expired-link fallback URLs. When a visitor hits a broken or expired link on Client A's domain, they land on Client A's own branded fallback page - not a generic platform error and not Client B's destination. Each client controls exactly how their audience exits a dead link.

Separate analytics per brand

Click analytics are scoped per domain so Client A's traffic never appears in Client B's data. You can review performance for each brand independently and report clean per-brand numbers to stakeholders or clients without manually filtering a shared pool of click events.

How it works

Domain isolation by design

Short link lookups use a per-domain key - not just the slug - so the same slug can exist on brand-a.to and brand-b.to as fully independent links with different destinations and separate analytics.

1
Plan

Verify each branded domain via DNS. Nimriz validates the TXT record, marks the domain verified, and enables it for your workspace - strict host matching applies from the first redirect.

2
Publish

Create links scoped to a specific host. Every link is tied to one domain at creation time. The same slug is valid on every domain you own because lookups always combine host and short code.

3
Measure

Review per-brand analytics. Click data is scoped by domain so you can report clean per-brand numbers without filtering a shared click pool.

  • Predictable resolution order: reserved paths block first, then short-code lookup within the matched host, then the domain-configured fallback if no slug matches.
  • Redirects default to 302 so you can update destinations mid-campaign without stale browser caches picking up the old target.
  • Reserved paths such as /_health, /api/*, and /.well-known/* are blocked globally so system-level paths never conflict with short codes, on any domain.
  • Workspace roles (owner, admin, member, viewer) let a multi-brand team or agency control who can create links, manage domains, and view analytics across the portfolio.
Example
Client A - spring launch
brand-a.to/spring → brand-a.com/spring-sale
Client B - spring launch
brand-b.to/spring → brand-b.com/spring-promo
Lookup key
(domain, "spring") → fully independent records
No collision - same slug, different domains

Setup

  1. 1
    Verify each brand domain via DNS
    Add your branded short domain to Nimriz and add the generated TXT record to your DNS provider. Once Nimriz verifies the record, the domain is marked verified and enabled for your workspace. Custom and branded domains are available on supported plans. See custom domain setup and DNS verification for step-by-step instructions.
  2. 2
    Create links scoped to each host
    Select a domain when creating a link. Every link is permanently scoped to the chosen host. Because lookups combine host and short code, the same slug - /launch, /app, /spring - is valid and independent on every verified domain you own. There is no global slug registry to coordinate across brands.
  3. 3
    Reuse readable slugs across brands safely
    Assign the same short code to matching campaigns on different brand domains. Each instance resolves to its own destination and accumulates its own click history. See the domain-bound slug glossary entry for a plain explanation of how per-domain uniqueness works.
  4. 4
    Manage access by role across your brand portfolio
    Workspace roles (owner, admin, member, viewer) let you give team members and clients the right level of access without granting blanket control. Admins can add domains and manage workspace settings; members can create and edit links; viewers can review analytics. See organizations and workspaces for the full role reference.
  5. 5
    Report per brand using domain-scoped analytics
    Click analytics are tied to the domain that resolved each redirect. Pull per-brand reports from your workspace without filtering a shared click pool. Each brand's traffic, referrers, and geographic breakdown stays in its own reporting scope. Combine with spaces and tags to add campaign-level organization within each brand.

What good looks like

Before: one shared shortener

  • Single shared domain means slug /spring can only point to one destination
  • Cross-brand slug collisions force awkward naming: /brand-a-spring, /brand-b-spring
  • Apex and www may be silently aliased, making routing ambiguous
  • No structural guarantee that Client A links are separate from Client B links
  • Broken links on one brand can expose a generic platform error to another brand's audience

After: isolated verified domains

  • Each brand runs on its own verified domain - brand-a.to and brand-b.to are structurally separate
  • Per-domain slug uniqueness means /spring is a valid, independent slug on every domain
  • Strict host matching: apex and www are distinct records, no silent aliasing
  • Reserved paths and loop prevention apply on every domain - no system-path conflicts, no redirect loops
  • Per-domain fallback URLs send each brand's audience to that brand's own page on broken or expired links

Each brand domain resolves independently. Same slugs, different destinations, separate analytics - with no coordination overhead between brands.

Frequently asked questions

Can the same slug exist on two different brand domains?
Yes. Short codes are unique per domain, not globally. brand-a.to/spring and brand-b.to/spring are fully independent records that can point to different destinations and accumulate separate click histories. The lookup always combines the incoming host with the short code, so there is no global namespace for slugs to collide in. See the domain-bound slug glossary entry for more detail.
How does custom domain setup work?
You add your branded short domain to Nimriz, then add a TXT record to your DNS provider to prove ownership. Nimriz checks the record and marks the domain verified when it passes. Until a domain is verified, it stays blocked for redirect and link-creation flows. Custom and branded domains are available on supported plans. Full instructions are in the custom domain setup and DNS verification docs.
Are apex and www treated as the same domain?
No. Nimriz treats example.com and www.example.com as separate domain records with no silent aliasing between them. If you want to use both variants, add and verify each as its own entry. This is by design: strict host matching ensures routing is always explicit and there is no ambiguity about which host resolved a redirect. See the strict host matching glossary entry for the full explanation.
How is access controlled across multiple brand domains in one workspace?
Workspace roles control who can do what across all domains in the workspace. The fixed roles are owner, admin, member, and viewer. Admins can add domains and manage workspace settings; members can create and edit links; viewers can review analytics but cannot create or modify links. Custom RBAC is not currently available - the platform uses these fixed roles. See organizations and workspaces and teams and security for the full role reference.
What plan do I need for custom branded domains?
Custom and branded domains with DNS verification are available on supported plans. Starter workspaces can use Nimriz built-in shared domains. Upgrade when you need your own verified host. Compare options on the pricing page.
What stops a link from looping back into Nimriz?
Managed-domain loop prevention blocks any destination whose host already belongs to a Nimriz-managed redirect domain. If you try to shorten a URL whose target is itself a Nimriz short-link host, the create request is rejected at the validation step. This applies to every domain in your workspace and prevents redirect chains from folding back on themselves regardless of how many brands you manage.
Are system paths like /api or /.well-known ever available as slugs?
No. Reserved paths including /_health, /api/*, and /.well-known/* are blocked globally across every domain. They stay outside the public slug namespace regardless of what short codes you create, so there is no way to accidentally route a short link to a system path. Short codes that would match reserved first-party slugs such as admin, login, or billing are also blocked at validation.
Can I manage agency client domains separately even if they share a workspace?
DNS ownership is scoped per domain, so one brand's verification record never bleeds into another's. Analytics are domain-scoped, so Client A's click data does not appear in Client B's reports. Fallback URLs are configured per domain so each client controls what their audience sees on broken or expired links. Whether you use one workspace per client or a shared workspace with role-based access is an operational choice - the isolation guarantees are structural either way. See organizations and workspaces for workspace layout guidance.

Related use cases

Deeper reading

Ready to get started?

Create your account and start with the Starter workflow. Compare plans when you need higher limits or supported-plan capabilities.