SaaS Development: Multi-Tenant Platforms Built to Scale
I design and build multi-tenant SaaS platforms end to end, from the tenant model and database to the web app, mobile app and production servers. Recent examples: Bicitra EMS, a school management SaaS with 338 automated tests behind its tenant isolation and fee arithmetic, and a hospital management platform that uses Postgres row-level security to keep each hospital's data apart.
Starting from $8,000 (web app, API and admin)Discuss your project
Problems I solve
- You need tenant isolation that holds up when a new endpoint forgets a check.
- Your MVP works for one customer, and you're not sure it will survive the tenth.
- You need billing, roles and an admin console, not just the core feature.
- You want one engineer who can own architecture, code and deployment.
What you get
- Architecture and tenant model, written down before code starts
- API, web dashboard and (if needed) Flutter mobile app
- Roles, permissions, audit logging and billing
- Automated tests on the risky parts: tenant isolation, money, concurrency
- Production deployment with CI/CD, monitoring and backups
Proof: work I've shipped
- Bicitra EMS
A multi-tenant School Management SaaS built for Bangladesh, phone-first.
- HMS — Hospital Management SaaS
An MVP of a multi-tenant hospital management platform, from the front desk to the ward to the accounts office.
I also deploy and run what I build. DevOps for startups →
Stack
- NestJS
- TypeScript
- Next.js
- PostgreSQL
- Prisma
- Redis
- Flutter
- Docker
Further reading
Questions
- How do you keep one tenant's data away from another's?
- Structurally, not by convention. On Bicitra EMS a Prisma Client Extension injects the tenant scope into every query, so a new endpoint can't forget it. When a nested include slipped past it once, I wrote up the leak and closed that path too. On the hospital platform, Postgres row-level security enforces the boundary inside the database, and a cross-tenant test tries every route with another hospital's IDs.
- Can you take over an existing SaaS codebase?
- Yes. I usually start with a paid architecture review: I read the code, map the tenant and data model, and write up the risks and a plan before we agree on the build work.
- Do you also deploy and run it?
- Yes. I set up production servers, CI/CD, monitoring and backups, and can keep them running on a monthly retainer. See DevOps for startups.
Start with a conversation
Tell me what you're building, and I'll reply with questions or a next step. See how we can work together.
Or send the details →