Multi-Service Marketplace: Delivery & Ride Booking System
A full multi-service marketplace connecting customers, vendors, and riders. Built a scalable backend with NestJS microservices and PostgreSQL, handling real-time ride tracking and order processing.
System Architecture & Scope
The Multi-Service Marketplace (Asoose) is a comprehensive platform connecting customers, vendors, and riders for food delivery, grocery shopping, and ride-hailing services. Collaborating with Solomon Paul, we engineered the entire ecosystem from the ground up.
The system is comprised of six distinct client applications communicating with a centralized API gateway:
- 3 Mobile Apps (React Native / Expo): Customer App, Vendor App, and Rider App (all live on the App Store & Google Play).
- 2 Web Apps (Next.js): A Customer Web App and an Admin/Support Dashboard.
- Backend (NestJS): An event-driven API layer communicating with PostgreSQL.
Enterprise Security & Compliance
Given the handling of financial transactions and personal data, security was a paramount concern. I implemented a multi-layered security approach:
- Authentication & Authorization: JWT-based authentication coupled with strict Role-Based Access Control (RBAC) separating Customers, Vendors, Riders, and Admins.
- Data Protection: Argon2 was utilized for robust password hashing, and AES-256 encryption secured sensitive PII at rest.
- Mobile Security: Implemented SSL pinning on the React Native mobile clients to prevent man-in-the-middle (MITM) attacks.
- Compliance: Engineered the system to be fully NDPA and GDPR compliant. This included building dedicated user consent flows, automated data deletion mechanisms, and strict privacy policy enforcements at the database level.
DevOps & Cloud Infrastructure
The infrastructure was designed for high availability and strict isolation. I managed the end-to-end deployment pipeline:
- Deployment Environments: The NestJS backend and PostgreSQL database were deployed on Railway, while the Next.js web applications were hosted on Vercel with secure CI/CD pipelines.
- AWS Integration: Managed AWS S3 for media storage, configured within an isolated VPC.
- Security & Monitoring: Applied IAM least-privilege roles, utilized AWS CloudWatch for real-time system monitoring, and enabled AWS Shield for DDoS protection.
- Data Integrity: Set up automated, encrypted daily database backups.
Key Technical Challenges
- Real-Time Ride Hailing: Synchronizing a rider's live location with the customer's app required sub-second latency. This was achieved by integrating Google Maps API for routing and leveraging WebSocket connections backed by a fast Redis cache.
- Cross-Platform Consistency: Maintaining a unified design system and state management architecture across three separate Expo mobile apps required creating highly modular, reusable internal UI packages.
- Time to Market: The entire architecture, API design, DevOps setup, third-party integrations, and full production deployment were successfully delivered within an aggressive 8-week timeline.