Fiap Systems: One Secure Platform, Eight Industry Editions

Fiap Systems is our multi-tenant business management SaaS, live in production and sold as industry editions: School, Hospital, Retail & POS, Restaurant, Bakery, Hotel & Property, Car Rental, and Event Rental, plus specialized government editions. Schools collecting fees, hospitals scheduling departments, and shops running multi-branch inventory in Cameroon all share the same underlying problem - running a business on paper and disconnected tools - and the same constraint: enterprise software prices don't fit.

Building one product per industry would have been unmaintainable for a small team; building one generic product would have fit nobody. The challenge was a single hardened platform that could present itself as a genuinely specialized product per industry - while guaranteeing that tenant A can never see tenant B's data, that each customer only sees the modules they license, and that money handling meets accounting standards rather than "a totals column in a table".

We built one multi-tenant core with strict per-tenant data isolation, multi-branch support, and role-based access control, then layered edition and module gating on top: the School edition exposes gradebooks, attendance, and tuition collection; the Hospital edition exposes patient intake, pharmacy, and laboratory pipelines; and so on across eight editions - all from one codebase. Every money movement in the platform is backed by a double-entry accounting ledger with automated reconciliation, and mobile money payments come in through verified, idempotent webhooks. Payroll, HR, inventory with low-stock alerts, and per-tenant WhatsApp and SMS notifications complete the operational picture. An AI assistant layer helps operators work faster - but every write action it proposes goes through a human-approval inbox and is gated by tool permissions. Customers reach the platform as a web app, a Windows desktop installer (Tauri), or a Flutter mobile app, with real-time updates over WebSockets.

Node.js with Express 5 and PostgreSQL via Prisma on the backend; Redis and WebSockets for real-time features; Next.js 16 with React 19 on the web; Tauri 2 for the Windows desktop client; Flutter for mobile.

Tenant isolation is enforced at the data layer with branch-level scoping, and CRITICAL-category events are audit-logged. Each tenant's payment, SMTP, and WhatsApp credentials are encrypted at rest with AES-256-GCM - a tenant's integration secrets are never stored in plaintext. Payment webhooks are verified and idempotent, so a replayed callback cannot double-post revenue. The AI layer is deny-by-default: it can only invoke explicitly permitted tools, and its writes require human approval. Role-based access control runs through every edition, and the ledger's double-entry discipline means financial records reconcile by construction.

Fiap Systems is live, with the eight-edition model working as designed: one platform to maintain and harden, many specialized products to sell. New editions reuse the hardened core - tenant isolation, ledger, payments, notifications - so industry expansion is a configuration-and-modules exercise rather than a rebuild.

Built and operated in-house by our engineering team, with active development as new editions and government deployments come online.