Enterprise SaaS
Infrastructure first, features second.
An enterprise strategy platform unifying scorecarding, assessments and innovation management — the largest and most technically demanding engagement in the portfolio.
- Products
- 3, licensable separately
- Delivery
- 9 milestones, ~32 weeks
- Team
- 9 people
- Tenancy
- Multi-tenant from day one
Project overview
Plan360 is an enterprise-grade strategic management platform: it helps organisations align strategy, run assessments and manage innovation pipelines from one system. Most companies do those three things across disconnected spreadsheets and point tools, and no existing platform unified them.
This is a full multi-tenant SaaS product, built from the ground up to serve many organisations, and that drove every early decision. True multi-tenancy with provable isolation had to exist from day one. Three product modules had to be separately licensable, so feature access is bound to subscription tier rather than to a build flag. And security, auditability and infrastructure-as-code were required from the first milestone rather than added once there were customers to justify them.
The result is that infrastructure-as-code, automated tenant provisioning and CI/CD were fully operational before a single end-user-facing feature shipped.
- Nexus Manager
- Strategy, scorecards, KPI measures
- Insight Hub
- Assessment marketplace
- Innova Catalyst
- Innovation and idea pipeline
- Sold as
- Standalone or bundled, by tier
Project details
- Identity and access
- Keycloak SSO, RBAC and MFA with backup codes
- Core data store
- CockroachDB / TiDB for multi-tenant scale
- Authorization model
- Open Policy Agent, enforcing tier-based feature access
- AI readiness
- Suggestion engine and assessment feed, built ahead of the AI layer
The challenges
- 01Organisations manage strategic planning, performance tracking and innovation across disconnected spreadsheets and point tools.
- 02No platform on the market unifies strategic scorecarding, assessment-based insight and innovation management in one system.
- 03True multi-tenant architecture was needed from day one, with strict and provable data isolation between client organisations.
- 04Three product modules had to be independently sellable or bundled, with access controlled by subscription tier.
- 05At this scale, security, auditability and infrastructure discipline had to be foundational rather than bolted on after launch.
Project goals
- Streamline strategic operations through automation and centralised planning.
- Enable faster, data-backed decisions through structured strategic frameworks.
- Give every client organisation a scalable, isolated multi-tenant workspace.
- Ship a modular platform where all three products can be adopted independently or together.
- Build a true SaaS business model in from the start: subscription tiers, billing, licensing and a platform-wide super-admin layer.
What we built
Nexus Manager
The core strategic management product: strategic perspectives, objectives and KPI-based measures, a full Balanced Scorecard framework, an interactive strategy map and real-time performance tracking.
Insight Hub
An assessment marketplace where organisations browse predefined assessments — digital maturity, security and compliance — or have contributors build and publish their own, with results feeding directly into Nexus Manager.
Innova Catalyst
Innovation management for capturing, evaluating and tracking ideas from submission through to approved project, including campaigns, voting and contributor profiles.
Enterprise authentication and IAM
Multi-tenant SSO, role-based access control, MFA with backup codes, and hardening across rate limiting, brute-force protection and CAPTCHA.
Guided organisation onboarding
A multi-step wizard spanning organisation details, hierarchy, strategic perspectives, objectives and KPI measures, including a custom formula builder for scoring logic.
The super-admin platform
Tenant management, subscription and billing administration, a platform-wide KPI dashboard, audit logs, and infrastructure controls covering provisioning, deployments, feature flags, security and monitoring.
Settings and administration
User, role and group management, session control and force-logout, licensing management and personalisation controls.
Production infrastructure from milestone one
Infrastructure-as-code, automated tenant provisioning and a CI/CD pipeline, all established before any product feature was built.
The team goes above and beyond the statement of work. No requests fall through the cracks, and they focus on the big picture. As a result, they've become a trusted partner for future development. Everyone was quick to respond to my emails and questions in the beginning. The team is committed to meeting deadlines and the work was exactly how I wanted it to.
AI readiness
AI features are explicitly out of the current build scope and reserved for a later phase. That is stated here rather than glossed, because the architecture that anticipates them is real and the features are not.
An objective suggestion engine, built ahead of the AI
The strategic planning workflow is architected to surface AI-generated objective suggestions per business perspective during onboarding, with the interaction model and interface already built ahead of the AI layer.
Assessment results as strategic input
Insight Hub's results are architected to feed automatically into Nexus Manager as actionable initiatives — the groundwork for AI-driven recommendations once that phase is scoped.
Tech stack
Sized for a platform expected to hold many enterprise tenants.
Frontend
Next.js
React
PrimeReact
Tailwind CSS
Redux Toolkit
Backend and data
NestJS (DDD)
CockroachDB / TiDB
AWS ElastiCache Redis
Amazon S3
ClickHouse / Snowflake
Platform and security
AWS EKS
Terraform
Keycloak
Open Policy Agent
SNS/SQS/Lambda
Jenkins
SonarQube
OWASP ZAP
Snyk
Testing and results
420
Man-days of engineering across nine milestones and three phases over roughly 32 weeks, by a dedicated nine-person team spanning architecture, frontend, backend, DevOps and QA.
338
Test cases executed against the authentication module alone, at an 88.9% pass rate, 87.5% on high-priority cases, and zero critical defects.
184
Further test cases across 19 sub-modules of the onboarding workflow, applying the same rigour platform-wide rather than to one module.
Delivered on an enterprise SaaS model: daily commit discipline, client-owned repositories, and a dedicated QA automation engineer leading final regression and production go-live.
Business impact
- Plan360 has a genuinely sellable multi-tenant SaaS product, designed to onboard and isolate many organisations.
- The three-module structure supports selling each product independently or bundled, which is what makes the tiered subscription model work.
- The super-admin layer gives their own team full operational visibility across every tenant from day one of the first paying customer.
- Building security, multi-tenancy and infrastructure discipline into milestone one means later features land on a production-grade foundation rather than requiring a rebuild.
More work
Every engagement
Healthtech
Supporting rehabilitation after discharge
Remote therapeutic monitoring built so the billing qualification cannot be faked, with an AI care plan no patient sees unapproved.
Transport
Turning every call into a booking.
Phone and web bookings answered by AI, written straight into the dispatch system, then rebuilt as a product other operators can buy.
Healthcare
Answering pharmacy calls without adding headcount.
An AI phone receptionist covering twenty stores around the clock, each with its own knowledge base and its data walled off from the rest.
Multi-tenancy is not a feature you add later.
When the thing you are building is a platform, the first milestone decides how much the tenth one costs.