Case study - Multi-Tenant & White-Label Digital Platform for Loyalty and Payments

Overview

BLUPIT is a high-performance multi-tenant digital platform that unifies e-wallet, marketplace, gamification, CRM, and challenge management capabilities into a single ecosystem.

Built in October 2025, the platform is designed to be deployed as a white-label solution, allowing each client to operate under its own brand, domain, and visual configuration without sharing data infrastructure. It targets companies across multiple sectors that need to build user loyalty, manage digital payments, run product catalogs, and execute engagement strategies.

The technical challenge

Building a high-scale, multi-tenant white-label platform posed critical challenges:

1. Full data isolation: Each tenant must operate in its own PostgreSQL schema, with no possibility of cross-client data leakage.

2. Horizontal scalability: The capacity to support 100,000 concurrent active users per node, with automatic scaling via Kubernetes.

3. Complete white-label: Custom domain, color palette, logo, app name, and communications configurable per client without recompilation.

4. Microservices architecture: Orchestration of multiple modules (wallet, marketplace, gamification, CRM) under a central API Gateway.

5. Reduced time-to-market: Onboarding a new tenant in under 24 hours, from signup to production.

What we did

Architecture and Technology Stack

Frontend — White-Label SPA/SSR

Backend — Microservices & API Gateway

Database & Infrastructure

Functional Modules

1. E-Wallet

Digital payments engine with balance management, transfers, and top-ups:

• Virtual balance per user with audited history
• Top-ups via PSE, credit/debit card, Wompi / PayU
• P2P transfers between users of the same tenant
• Redemption of gamification points as credit
• Financial reports per tenant with CSV/PDF export

2. Marketplace and E-commerce

Product and service catalog per tenant:

• Multi-level catalog: categories, subcategories, tags
• Cart and checkout integrated with the wallet
• Order management with complete status tracking
• Real-time inventory with stock alerts
• Discount, coupon, and per-segment pricing engine
• Seller panel with sales metrics

3. Gamification and Challenges

Engagement system based on points, levels, and badges:

• Points engine with per-action configurable rules
• User levels and progression with tier-based benefits
• Unlockable badges with customizable conditions
• Dynamic individual and group challenges
• Global and segmented leaderboards
• QGames: gamified quizzes with timed scoring
• Automatic certificate generation

4. CRM and Client Management

Native CRM module with a complete lifecycle:

• Contact database with enriched profiling
• Kanban-style sales pipeline with drag & drop
• Unified interaction history
• Dynamic behavior-based segmentation
• Communications automation (email, push, SMS)
• Automatic assignment of contacts to agents
• Retention, churn, and LTV reports

5. Multi-Tenant Administration Panel

Central white-label operations console:

• Guided onboarding for new tenants
• Visual configuration: logo, colors, fonts, custom domain
• Granular role and permission management
• Global and per-tenant metrics dashboard
• Plan billing and usage with alerts
• Audit logs of administrative actions

6. AI Agents and Intelligent Automation

Integrated artificial-intelligence layer:

• Conversational agents with a per-tenant knowledge base
• Automatic escalation to a human agent
• Product recommendations (pgvector + embeddings)
• Generation of personalized content for campaigns

Multitenancy and White-Label Model

Data Isolation

• Each tenant operates in its own PostgreSQL schema
• tenant_id as a mandatory filter across every layer
• Accessing another tenant's data is impossible without privilege escalation

White-Label UI

• The frontend reads the active tenant's brand configuration on the first request
• Fully customized rendering without recompilation
• Domain, logo, color palette, and app name are configurable

Scalability

• Horizontal architecture: new nodes with no downtime
• Each node handles up to 100,000 active users
• The load balancer distributes traffic automatically

Security and Compliance

• Authentication: JWT with short-lived refresh tokens + Argon2
• CORS: Strictly configured per tenant domain
• Security headers: HSTS, CSP, X-Frame-Options
• Rate limiting: Per IP and user on critical routes
• Auditing: Every sensitive action logged with actor, timestamp, and IP
• OWASP Top 10: Compliance with best practices
• Pentest: Annual, planned for enterprise tenants

Documentation and Operations

• 100+ Markdown files: module analysis, diagnostics, runbooks
• Key guides: DEPLOYMENT_GUIDE, ONBOARDING_TENANT, PLAN_RECUPERACION_EMERGENCIA
• Utility scripts: cleanup, seeding, integrity verification, E2E tests
• Migrations: Numbered 000–048, applied automatically
• Backups: Daily PostgreSQL backups with 30-day retention
• Onboarding: A guided process of under 24 hours

Evolution Roadmap

Value Delivered

Status: Platform in active production with more than 30 clients across multiple sectors (retail, fintech, entertainment, corporate education), processing payments, gamification, and CRM operations daily.