Agency Client Portal

Problem

Agencies needed a single system where multiple tenants could manage client work without data leakage — with approvals, deliverables, and auditability baked in. Ad-hoc spreadsheets and shared folders failed at scale.

Approach

Designed a tenant-aware backend from day one: Postgres row-level isolation, granular RBAC, JWT auth, and async job pipelines for exports and notifications. Documented every endpoint with Swagger/OpenAPI and shipped a Dockerized deployment path so environments stayed reproducible.

Architecture

• Row-level multi-tenant isolation in PostgreSQL with Prisma as the typed data layer
• Granular RBAC for agency roles spanning projects, approvals, and deliverables
• Audit logging for sensitive actions to support accountability and debugging
• BullMQ + Redis for async exports and notification jobs outside the request path
• Dockerized runtime with OpenAPI/Swagger coverage across the API surface

Outcomes

• Primary backend showcase: production-ready multi-tenant SaaS patterns end to end
• Clear separation between request-time APIs and background work via queues
• Handoff-friendly docs and containers that reduce environment mismatch risk