Plate 05Confidential
Plataforma financeira
A multi-organization financial platform, in production.
Professional project under confidentiality: only the idea is shown here, no names or numbers.
Problem
A financial platform had to host several organizations, each with its own users, credentials and integrations, without any data leaking from one to another.
Solution
I restructured the backend for multiple organizations with verified isolation: access scope checked by the compiler, every SQL query going through a gate that requires the organization filter, and integration credentials encrypted per organization.
Decisions
- 01Fail-closed: every endpoint starts blocked for a new organization until it has been reviewed.
- 02CI checks that prevent unscoped queries and credential reads from the wrong place.
- 03Concurrency treated as a requirement: locks, idempotency and compare-and-set on flows that must never run twice.
Stack
- TypeScript
- NestJS
- Prisma
- PostgreSQL
- Redis
- BullMQ