Cloud-native architecture
Context
The situation before the platform
Why contractor assurance needed one ecosystem instead of scattered documents, spreadsheets and manual insurance checks.
| The business |
A construction and property management business serving property owners, contractors and enterprises, including contractors delivering renewable energy work such as solar panels, heat pumps, EV charging systems and battery storage. |
| The starting point |
Verification was fragmented and compliance largely manual. Trade passports, insurance records, certifications, compliance information and audit logs sat across separate workflows, so no one had a complete view of whether a contractor was actually qualified and covered. |
| The trigger |
Manual insurance and compliance management raised the risk of expired policies, incomplete documentation and non-compliant contractors reaching live projects, while contractor volumes and document counts kept growing. |
| What they wanted |
One connected ecosystem covering trade passport verification, contractor assurance, insurance validation, compliance tracking, documentation, audit trails and insurance-backed project protection. |
| Constraints |
The interface had to stay simple for contractors and property owners handling complex verification paperwork · sensitive insurance, certification and compliance data required strong authentication, encryption and role-based access from the outset · records had to stay accurate and synchronised across modules as volumes grew. |
System
What it runs at today
The platform as delivered, live and scaling across web and mobile-responsive access.
Compliance risk
30%
Reduction in compliance risk after automated policy monitoring and verification alerts shipped
Core capabilities
6
Trade passport verification, contractor verification services, insurance-backed guarantee, deposit protection, assurance and compliance management, renewable energy project support
Engagement length
24+
Months, as an enterprise engineering partnership through build and scaling
Team size
10+
Designers, engineers and QA covering frontend, backend, data and integrations
The engineering problem
Six gaps that shaped the build from day one
Not vague pain points — the specific tensions in automating contractor verification for a regulated, document-heavy industry, each paired with what we did about it.
0
1
Trade passports, insurance and certifications in one place
Managing trade passports, insurance records, certifications, compliance information, audit logs and renewable energy contractor services created significant operational complexity. A centralised, scalable system was needed to organise large volumes of contractor documentation while keeping verification records accurate and accessible.
What we did
A digital trade passport system that validates qualifications, certifications, insurance records and compliance information in one environment, creating a single source of truth for contractor records and simplifying onboarding.
0
2
Complex paperwork turned into simple digital steps
Contractors and property owners needed a simple, intuitive interface for verification records, certifications, insurance documents and contractor information. Complex verification workflows had to become streamlined digital processes with responsive navigation and easy document access, to improve adoption and cut administrative effort.
What we did
A clean, centralised workspace bringing project management, contractor verification, compliance tracking and documentation together, with responsive layouts and role-based access so every user type navigates the same workflows across devices.
0
3
Security and privacy had to be structural
The platform handles insurance records, certifications, compliance documents and verification data. Strong authentication, encrypted storage, role-based access controls and secure document management were essential to prevent unauthorised access, and secure audit trails were required to support transparency and user trust.
What we did
Secure authentication with permission-based access, encrypted data storage, protected transmission and controlled document management, so each role reaches only the records it needs and every action leaves an audit record.
0
4
Expired policies could not be found by hand
Manual insurance and compliance management increased the risk of expired policies, incomplete documentation and non-compliant contractors. Automated policy monitoring, compliance tracking and verification alerts were needed to reduce administrative effort and keep contractors consistently meeting applicable requirements.
What we did
Insurance validation and compliance tracking that monitor policies, certifications and requirements continuously, with automated notifications flagging expired or incomplete documentation and giving real-time compliance visibility for faster decisions.
0
5
Verification workflows that cannot quietly fail
Reliable verification workflows, secure document handling, accurate contractor records and stable performance were critical to operational trust. Comprehensive testing and validation were required to minimize workflow failures while the platform handled growing volumes of contractor data and verification activity.
What we did
Continuous functional testing, workflow validation and security assessment across verification, insurance processing, compliance tracking and secure document management, on infrastructure built to scale with contractor volume.
0
6
One record, consistent across every module
Synchronizing contractor profiles, compliance records, insurance information, verification data and documents across multiple modules added technical complexity. Reliable integration and synchronization mechanisms were required to prevent duplicate or outdated records and keep information consistent platform wide.
What we did
Centralized documentation and structured workflows with status tracking, so a certification or policy update propagates once, and every module reads the same current record.
Architecture
How it fits together
Simplified — the shape rather than every service.
0
1
Clients
Vue 3 • TypeScript • Vuetify • Tailwind • CSS
A responsive Vue 3 and TypeScript frontend gives contractors, property owners and administrators the same verification and compliance workflows on a desktop or a phone.
0
2
Gateway
Nest.js API layer • Authentication & roles • KYC identity checks
A Nest.js API surface handles authentication, role-based permissions and every client request, with KYC identity verification sitting in front of contractor onboarding.
0
3
Services
Trade passport verification • Insurance validation • Compliance tracking • Audit management • Deposit protection
Each function is its own concern, so verification, insurance validation, compliance tracking, audit management and deposit protection can be tuned or extended without destabilizing the others.
0
4
Data & infra
SQL • TypeORM • Google Cloud Platform
A SQL database accessed through TypeORM holds contractor, compliance and document records, deployed on Google Cloud Platform for headroom as contractor networks expand.
Scalability was treated as an architectural requirement rather than a later tuning exercise: the platform was built to absorb growing volumes of contractor records, compliance data, documents and verification activity while performance stays stable.
Solutions
Six systems doing the actual work
Not a features list — the specific things we built behind every number above.
Trade passport verification
Digital contractor verification covering qualifications, certifications and insurance records, with centralised workflows that reduce manual effort and simplify onboarding.
Insurance-backed contractor assurance
Centralized insurance validation and compliance tracking let organizations monitor policy status, validity and requirements, cutting the risk of expired coverage.
Secure compliance management
Compliance records and audit-ready documentation managed through structured workflows, with real-time tracking that supports regulatory adherence.
Centralised documentation
Contractor records, certifications, insurance files and compliance documents held in one system, improving accessibility and reducing duplication.
Audit trails & transparency
Detailed logs capture verification updates, document approvals and compliance actions across the contractor lifecycle, giving stakeholders a reliable history.
Renewable energy contractor verification
Verification for contractors working on solar panels, heat pumps, EV charging systems and battery storage, checking certifications and coverage before engagement.
Key features
What the platform does day to day
Six capabilities, each closing one of the gaps identified above.
| Capability | RUNS | Refresh | WHAT IT DOES |
|---|---|---|---|
| Address verification & property intelligence | Integrated service | On lookup | Validates locations and returns accurate property insights for project planning |
| KYC-based identity verification | Onboarding | Per contractor | Validates contractor identities before onboarding to establish trusted relationships |
| Communication & notifications | Event-driven | Real time | Keeps contractors, owners and administrators informed of verification and compliance updates |
| Deposit protection management | Per project | Lifecycle | Safeguards project funds and provide financial assurance through the project lifecycle |
| Contractor profile & project history | Centralised | On update | Holds qualifications, certifications, insurance records, compliance data and past projects |
| Compliance & assurance tracking | Continuous | Continuous | Continuous |
Integrations
How the moving parts plug in
Payments, property data, messaging and CRM reach the platform through one API layer rather than sitting beside it as separate tools.
External systems
Stripe
Payments and deposit protection flow
Google Maps & Propbar
Address and property intelligence
Pusher & Brevo
Real-time updates and notifications
Salesforce & EPC data
CRM records and energy performance data
↓
through one API layer ↓
Platform integration layer
Nest.js API layer
One contract for every client
Auth & role management
Contractors, owners, administrators
Secure document handling
Encrypted storage and controlled access
↓
into the core services ↓
Core services
Trade passports
Insurance validation
Compliance tracking
Audit trails
Documents
Because verification, insurance and compliance all resolve against the same services, checking a contractor's certifications, confirming their cover and releasing a protected deposit are three steps in one workspace rather than three separate systems.
Security
What protects contractor and insurance data
The platform holds insurance records, certifications, compliance documents and verification data — so protection was designed in, not bolted on.
Secure authentication
Secure authentication with role-based access controls means contractors, administrators and property owners reach only the records their role requires.
Encrypted data handling
Encrypted storage, secure transmission and controlled access protect contractor records, certifications, insurance information and audit data end to end.
Protected document management
Compliance documents and insurance files are handled through controlled workflows rather than circulated as loose attachments, keeping records accurate and private.
Secure audit trails
Verification activity, approvals, updates and compliance actions are logged across the contractor lifecycle, strengthening transparency and stakeholder trust.
Process
How we got there
Five stages, starting with how verification and compliance actually work on site rather than a feature list.
0
1
Research
Analysed contractor verification workflows, insurance validation requirements, compliance processes and documentation challenges across construction and renewable energy.
0
2
Design
Designed a scalable architecture around secure verification, centralized documentation and streamlined compliance, with journeys structured to simplify onboarding and document submission.
0
3
Development
Built trade passport workflows, insurance validation, compliance tracking, audit management and centralized documentation, with automation reducing manual verification effort.
0
4
Testing
Continuous functional testing, workflow validation, security assessment and quality assurance across verification, insurance processing, compliance tracking and document management
0
5
Deployment
Deployed on scalable infrastructure supporting secure verification, compliance workflows and centralized documentation, prioritizing reliable performance and secure data handling.
Business impact
What changed for the business
Beyond the headline numbers, three things contractors and property owners noticed first.
One connected assurance ecosystem
Trade passport management, insurance validation and compliance tracking moved into a single system, giving organisations visibility into contractor qualifications, certifications and insurance documentation
Transparency that stands up to audit
Secure audit trails, structured verification workflows and centralized records improved accountability and trust between contractors, property owners and administrators.
Renewable energy work supported properly
Reliable verification and compliance management for contractors delivering solar panels, EV charging, heat pumps and battery storage, so qualified providers can be engaged with confidence.
Commercial outcome
What the engineering choices are worth in operating terms
Every headline number traces back to a specific decision, not a vague platform effect.
| Engineering decision | Operating outcome | Measured effect |
|---|---|---|
| Digital trade passport as single source of truth | Verification records assembled once and reused across onboarding | 40% faster verification |
| Automated policy monitoring & verification alerts | Expired cover and incomplete documentation surface before project engagement | 30% less compliance risk |
| Centralised documentation & module synchronisation | No duplicate or outdated contractor records between modules | 35% better data synchronization |
| Encryption, role-based access & audit trails | Sensitive insurance and compliance data stays private and traceable | 99% data security protection |
Stack
What it's built on
The actual technologies, not feature names with icons attached.
Frontend
- Vue.js 3
- TypeScript
- Vuetify
- Tailwind CSS
Backend
- Nest.js
- TypeScript
Data & infra
- SQL
- TypeORM
- Google Cloud Platform
Integrations
- Stripe
- Salesforce
- Pusher
- Brevo
- Google Maps
- Propbar
- EPC data
- KYC
Full case study
Get the complete write-up as a PDF
The same content on this page, plus the extended module breakdown and rollout phases, in a single document you can share internally.
- Full module and service architecture
- Discovery-to-launch process, phase by phase
- Metrics methodology, so the numbers hold up in a review
Download the case study
No spam • unsubscribe anytime • we’re here when you need us
More work
Other platform builds
Hospitality
Every stay, extraordinary.
Hospitality group transformed guest experiences through IoT-enabled room automation, reducing service requests by 58%
Hospitality group transformed guest experiences through IoT-enabled room automation, reducing service requests by 58%
IoT - Hospitality
Read the case study →