Applications run on Cloudflare Workers with D1 for the database, R2 for private files, Pages for the public site, and the WAF and CDN in front. Payments and invoicing run through Stripe with automatic reconciliation, and mail through Resend with inbound mail routed into the platform's own mailboxes.
TypeScript throughout, with automated tests run before every release, and no third-party trackers.
A web application firewall sits in front of every site and the platform. Bot protection on public forms is checked on the server as well as in the browser, with limits on sign-in and payment attempts.
Role-based access means staff, finance, certification, chapters, assessors and companies each see only their part. Every change is written to an audit log, outgoing mail passes a guard, and the control room shows the health of every system and scheduled job.
Data and files
Build and services