Architecture, payments, compliance. The technical choices that shape the platform, explained plainly.
Above €300, a listing triggers a strongly-recommended invoice requirement. How that threshold is computed, how the request is tracked, and why that trail couldn't depend on messages that get purged after three years.
Read article →A PHPUnit test compares translation keys across French, English, Italian and Spanish to catch drift before a raw key reaches a user. What it checks, and what it doesn't cover.
Read article →Wazuh continuously monitors our AWS infrastructure: an agent in every client environment, file integrity monitoring, vulnerability detection, GDPR compliance modules. What it does well, and what it demands in return.
Read article →Strix is an open-source tool that sends AI agents against your staging environment to find real exploitable vulnerabilities, proof included. No static analysis, no false positives: every reported flaw comes with a working PoC.
Read article →Mangopay is built for European marketplaces. Stripe Connect Custom offers full UX control, global coverage, and a much broader ecosystem. A factual comparison, and why we chose Stripe.
Read article →Metrics, RDS and WAF logs, application errors: CloudWatch, Rollbar and Wazuh make up our observability layer. How we monitor a platform where every client has its own environment.
Read article →Every push to the deployment branch triggers a three-stage pipeline: GitHub source, build via CodeBuild, deployment to Elastic Beanstalk with automatic rollback. Tests run continuously in GitHub Actions. How it is structured, and how IAM roles are scoped per stage.
Read article →CloudFront serves static assets, accelerates member-uploaded photos, and acts as the single entry point in front of which AWS WAF inspects all incoming traffic. How we configure both, and which managed rules we enable.
Read article →Standard, Express, Custom: three Stripe integration modes with very different implications. Why Custom accounts are essential as soon as you need wallets, DAC7 reporting and a seamless UX.
Read article →A luxury maison, a golf club, an alumni network: three organisations on one platform. How we isolate each client with a dedicated database, secret and encryption key, and keep configuration and moderation independent.
Read article →DAC7 requires the platform operator to report seller income to the tax authority. GDPR imposes strict rules on personal data. Who is responsible for what, and how the platform is structured to make compliance achievable.
Read article →Parallelisation, CI run video replay, flaky test detection: Cypress Cloud turns E2E tests from a burden into a continuous safety net. What we set up on our multi-tenant platform.
Read article →Public resale platforms erode the value of premium products and dilute brand image. A private marketplace creates a closed loop where resale stays within the community: traceable products, preserved value, measurable impact.
Read article →Every client gets its own environment: dedicated application, database, secret and encryption key. Terraform turns this provisioning into a reproducible, traceable operation: one module, a set of parameters, one apply.
Read article →o2switch for the site, AWS Paris for the platform: how we integrated environmental criteria into our infrastructure choices, and what it means concretely in terms of carbon footprint.
Read article →We are available to go into detail with your IT, CTO or compliance teams. No sales script, no pitch deck.