The Challenge

At ECSPL, high-volume financial and legal inquiry platforms (expertpanel.org, lawyerpanel.org, stopharassment.in, expertsupport.org) process thousands of real-time client inquiries and credit-report evaluations daily.

Key architectural hurdles included:

Multi-Tenant Isolation & Dynamic Branding: Operating multiple distinct brand identities across shared infrastructure without data leakage, style cross-contamination, or operational overhead.
Third-Party Attribution Loss: Browser-side tracking scripts (Meta Pixel, Google Analytics) experienced up to 38% signal degradation due to Safari Intelligent Tracking Prevention (ITP) and client-side ad blockers.
PII Security & Privacy Compliance: Preventing Personally Identifiable Information (PII) leaks in browser URL strings, query parameters, telemetry spans, and server logs.
Resilient Billing & Webhook Reconciliation: Handling instant payment verification, recurring subscription invoicing, and idempotent webhook reconciliation without transactional drops.
CI/CD Velocity & Staging Isolation: Managing multi-brand preview environments and zero-downtime production rollouts without risky manual deployments.

Architectural Solutions & System Pipeline

[Client Multi-Tenant App (Next.js / React)] ──> [Vercel Branch CI/CD Gateway]
                                                              │
                                                              ▼
                                              [Cloudflare Edge Proxy (Hono)]
                                                              │
        ┌─────────────────────────────────────────────────────┼─────────────────────────────────────────────────────┐
        ▼                                                     ▼                                                     ▼
 [Multi-Tenant Scoped Data]                         [Hybrid Meta CAPI Tracker]                            [PII Sanitization Gateway]
 (Isolated Config & Branding)                       (Web Crypto SHA-256 Hashing)                          (Stripped URLs & Telemetry)
        │                                                     │                                                     │
        └─────────────────────────────────────────────────────┼─────────────────────────────────────────────────────┘
                                                              ▼
                                           [Razorpay Webhook & Invoicing Engine]
                                           (Signature Verification & Auto-Reconcile)
                                                              │
                                                              ▼
                                             [Sentry Distributed OpenTelemetry]

1. Multi-Tenant Architecture & Dynamic Tenant Configuration

Developed and scaled a multi-tenant ad-driven web application with isolated tenant configuration:

Constructed a tenant context resolution pipeline that dynamically loads branding assets, theme tokens, and domain configs based on host headers.
Enforced strictly scoped data access across client environments, preventing cross-tenant data contamination across inquiry pipelines and CRM hand-offs.

2. Automated CI/CD & Git Branch Workflows on Vercel

Automated deployment workflows on Vercel using Git branch-based preview and production environments:

Accelerated deployment velocity by generating isolated, ephemeral staging environments for every pull request with zero configuration drift.
Enabled risk-free staging verifications and end-to-end regression validation prior to production merges.

3. Hybrid Ad Attribution & Privacy Compliance (Meta Pixel & CAPI)

Integrated hybrid ad tracking via Meta Pixel and server-side Meta Conversions API (CAPI) with SHA-256 data hashing:

Preserved measurement accuracy against ad blockers and browser tracking preventions while strictly safeguarding user privacy.
Employs Web Crypto SHA-256 normalization to hash client identifiers (emails, phone numbers, IP addresses) before outbound transmission.
Synchronized deterministic event_id deduplication between browser pixels and edge servers, lifting Meta Event Match Quality (EMQ) from 4.8/10 to 8.9/10 and cutting Customer Acquisition Cost (CAC) by 22%.

4. Secure Payment Processing & Webhook Reconciliation (Razorpay)

Implemented end-to-end payment processing with Razorpay:

Integrated cryptographic signature verification on inbound webhook notifications, ensuring tamper-proof payment receipt.
Designed automated subscription invoicing and resilient, idempotent webhook handlers for instant transaction reconciliation and automated CRM status updates.

5. Rigorous Security & PII Protection

Enforced comprehensive frontend and backend data sanitation across all user-facing workflows:

Stripped and masked Personally Identifiable Information (PII) from URL query parameters, client error traces, and telemetry payloads.
Maintained regulatory compliance with data privacy standards and completely neutralized sensitive credential and identity leakage risks.

6. Experian OTP Edge Verification Gateway

Engineered dedicated serverless API proxies using Hono on Cloudflare Workers for Experian credit-report OTP generation (SendExpOtp) and verification (VerifyExpOtp):

Sensitive API keys, OAuth tokens, and HMAC signing secrets remain encrypted inside edge environment bindings.
Direct browser access to bureau infrastructure is completely eliminated, neutralizing credential exposure risks.

7. Distributed Observability & Playwright CI Testing

Integrated @sentry/hono and OpenTelemetry diagnostic spans across edge routes to trace user journeys from initial form submission to webhook execution.
Constructed automated CI regression test suites with Playwright running across Vercel preview environments to validate form states, OTP workflows, and Razorpay payment flows.

Multi-Tenant Ad-Driven Platform & Enterprise Edge API Infrastructure

Technologies & Tools