OCSI Verification & Data Intelligence Platform

The OCSI Verification & Data Intelligence Platform is a multi-tenant SaaS application developed for Offshore Credit Support Inc. to manage complex credit intelligence, background verification, research, reporting, and subscriber workflows through a centralized digital platform.

The system supports OCSI’s operational teams, researchers, reviewers, administrators, subscribers, and client organizations by bringing verification requests, research data, supporting documents, workflow approvals, reports, notifications, and audit information into one secure application.

SaaS Platform Architecture

The application uses a separated frontend and API architecture.

The user-facing application is built with Astro 7 in server-side rendering mode and deployed through Cloudflare Workers.

The backend is built with AdonisJS 7, while Prisma ORM 7 manages application data stored in PostgreSQL.

This architecture provides a clear separation between presentation, application workflows, authentication, business rules, and persistent data.

The platform is designed for multi-tenant operation, allowing multiple subscriber organizations and accounts to use the system while maintaining strict isolation between their information.

Verification Management

The platform supports multiple verification products and research workflows, including:

• Business Data Check
• Employment Data Check
• Residence Data Check
• Court Data Check
• Credit Data Check
• PDRN

Each verification module follows structured business rules while sharing a centralized workflow architecture.

This allows OCSI to maintain consistent processes across different types of investigations while preserving the specialized information required for each verification product.

Research Workflow

A centralized workflow engine manages each verification request throughout its operational lifecycle.

Verification records can move through stages such as:

Unassigned → Assigned → Accepted → Research → Submitted → Review → Approved → Completed

The workflow also supports rejection, reassignment, cancellation, and other controlled transitions.

Dedicated queues help researchers and reviewers identify which records require action, including:

• Unassigned requests
• Personal research assignments
• Review queues
• Completed verifications

This structure provides clearer ownership, accountability, and visibility across the research process.

Structured Research Data

Instead of relying primarily on unstructured notes, the application captures verification information through structured research sections.

This makes information easier to review, validate, search, report, and reuse throughout the verification workflow.

Each verification type can maintain specialized fields and research requirements while still operating under the common platform architecture.

Subscriber and Account Management

The SaaS platform includes subscriber management for organizations using OCSI’s services.

Administrators can manage:

• Subscriber organizations
• Subscriber accounts
• Company profiles
• Users
• Roles
• Permissions

Tenant isolation ensures subscribers only access information associated with their own organization and authorized accounts.

This architecture provides the foundation for serving multiple institutional clients through a single application.

Role-Based Access Control

The platform uses dynamic role and permission management to control access to application features and operations.

Permissions can be applied across administrative functions, verification workflows, reports, subscribers, research activities, and other protected functionality.

Authorization is enforced by the backend rather than relying exclusively on interface-level restrictions.

Secure Authentication Architecture

Security was an important consideration in the frontend and API integration.

Users authenticate through the Astro application, which communicates with the AdonisJS API server-side.

Authentication tokens are stored in Secure, HTTP-only cookies and are not exposed to browser JavaScript or local storage.

Browser operations communicate with same-origin Astro endpoints, while the Astro server securely forwards authorized operations to the API.

This backend-for-frontend architecture reduces the exposure of authentication credentials while maintaining a responsive web application experience.

Document Management

Verification investigations frequently require supporting documents and evidence.

The platform therefore includes secure document management capabilities covering:

• Private document uploads
• Upload authorization
• Upload confirmation
• Protected downloads
• Document deletion
• Access validation

Documents are stored using private S3-compatible object storage, allowing deployments to use compatible platforms such as AWS S3, DigitalOcean Spaces, or other supported storage providers.

Short-lived signed URLs are used when controlled direct access to private files is required.

Dashboards and Unified Search

Operational dashboards provide users with visibility into verification workloads and activity.

The application includes dashboard metrics and charts for monitoring system operations and verification processing.

A unified search interface allows authorized users to locate verification records across the different verification products without requiring separate searches for each module.

Reporting

The platform contains an asynchronous reporting architecture for generating operational and verification reports.

Supported formats include:

• CSV
• XLSX
• PDF

Report generation is processed asynchronously so larger reports do not block normal application requests.

Generated reports are stored privately and made available through authorized downloads.

PDF generation is handled through Gotenberg, while report expiration and cleanup processes prevent generated files from remaining indefinitely in storage.

Notifications

OCSI includes a transactional notification system for important workflow events and system activities.

Notification events are written through a transactional outbox architecture, helping ensure important notifications are not lost when application processes fail or restart.

Background workers process queued notifications and handle email delivery.

Production email delivery is integrated through Mailjet.

Workflow History and Audit Trail

The platform maintains detailed workflow histories so users can understand how a verification request progressed through its lifecycle.

Administrative audit logs provide additional traceability for important system and domain changes.

These capabilities are particularly important for an application dealing with sensitive research, credit information, approvals, and institutional clients.

API-Driven Architecture

The backend exposes a structured REST API with explicit request and response contracts.

OpenAPI documentation defines the integration between the frontend and backend.

The Astro application uses generated operation mappings and a typed server client to communicate with the AdonisJS API.

Automated validation checks ensure that frontend operations remain aligned with the API contract when backend routes change.

This reduces integration errors as the application continues to evolve.

Production Reliability

The application includes production-oriented operational controls such as:

• Startup, liveness, and readiness health checks
• Database connectivity validation
• Private storage connectivity checks
• API rate limiting
• Request-size limits
• Security headers
• Content Security Policy
• Request tracing
• Prometheus-compatible metrics
• Automated API contract validation
• Unit, functional, integration, and production smoke testing
• Production configuration validation

These controls help make the system suitable for continuous business operations rather than functioning only as a prototype or internal proof of concept.

Responsive Application Interface

The Astro frontend provides responsive interfaces for desktops, tablets, and mobile devices.

The system also supports both light and dark interfaces while maintaining consistent navigation across dashboards, verification modules, queues, reporting, subscriber management, administration, and audit functionality.

My Role

I worked on OCSI as the Full-Stack Developer and System Architect, covering both the application frontend and backend architecture.

My responsibilities included SaaS architecture, Astro frontend development, Cloudflare Workers integration, AdonisJS API development, PostgreSQL and Prisma data architecture, authentication, tenant isolation, role-based authorization, verification workflow design, private document handling, reporting, notification processing, API contracts, audit controls, responsive application interfaces, testing, deployment architecture, and production hardening.

The project demonstrates my experience building business-critical SaaS applications where application architecture, security, workflow automation, data integrity, usability, and operational reliability are equally important.