Two platforms,
both still running.

The problem

Multi-location retail operations run on numbers that arrive from several systems that were never designed to agree. Sales come from point of sale. Commissions come from a carrier settlement feed. Hours come from a workforce scheduling provider. Each one uses its own identifiers, its own periods, and its own idea of what counts.

The result is a monthly reconciliation done by hand, disputes that cannot be settled because nobody can show their working, and managers making staffing decisions from numbers that are already a week old.

What we built

A single platform that ingests all of those feeds, reconciles them against one another, and becomes the system of record. Each business on the platform gets isolated data with its own branding, its own module set, and its own permission structure.

On top of the reconciled data sit the things the operation actually needs day to day: commission calculation with lock and approve controls, chargeback detection with a documented priority order, payroll with rate history, scheduling with a time clock, a support desk, a form builder with electronic signature, and dashboards for each level of management.

Notable engineering

• Database per tenant
• Signed partner API
• OAuth 2 mail
• Queue workers
• Realtime chat
• Subscription billing
• White label
• Mobile API

Tenants are separated at the database level rather than by a column filter, so one customer's data cannot leak into another's through a forgotten query. Sensitive tables are additionally namespaced per tenant.

Partner integrations use signed request authentication against staging and production environments, poll on a schedule, and report a received count on every run so a partial failure surfaces immediately instead of quietly under-reporting.

Money paths are treated differently from everything else. Once a commission period is locked and paid, the records are immutable and any recalculation must filter locked periods out before it runs.