PayTrack — Financial Control Platform
Cloud-Native SaaS for personal and small corporate finance, built for high performance, strict multitenancy, and superior Open Finance integration.
Architecture & Core
- Microservices Architecture: Decoupled services with Spring Boot 4 (JDK25) ensuring resilience and easy scalability.
- Multitenancy (SaaS): Isolated databases and application layers using the Multi-Tenancy pattern for maximum data isolation.
- API Gateway: Canonical DTOs to establish a stable contract and decouple PayTrack from external services. Integration is secured via Token Exchange for rigorous, zero-trust security.
- Event-Driven: Utilizing Apache Kafka for asynchronous service communication, guaranteeing eventual consistency and high availability.
Data & Persistence
- Primary DB: PostgreSQL is the source of truth, optimized with read replicas for data reporting.
- Caching: Redis is used for high-speed caching, distributed session management, and fast lookups.
- File Storage: Private Minio cluster provides S3-compatible object storage for secure document uploads and backup archives.
- Core Data Services: Leveraging Hibernate with a Multi-Tenancy strategy to achieve strict data isolation between tenants, ensuring secure and scalable access within a single database schema.
Security & Identity
- Identity Management: Keycloak serves as the central OIDC/OAuth 2.0 provider for all microservices, managing tenants and users.
- Security Auditing: Granular, non-repudiable audit logs of user actions for compliance and traceability.
- Policy Enforcement Point (PEP): enforce strict security policies, including JWT validation and Role-Based Access Control (RBAC), for zero-trust security.
- Data Encryption: All sensitive data is encrypted at rest (PostgreSQL TDE) and in transit (mTLS).
DevOps & CI/CD
- CI/CD Pipelines: Automated building, Quality Assurance (QA) testing, and deployment using Jenkins to manage the full-stack Java build lifecycle. Artifacts are centralized via Artifactory to guarantee immutable and versioned build outputs.
- Code Quality Gates: Mandatory continuous code inspection managed by SonarQube, enforcing strict Quality Gates based on static analysis to prevent security vulnerabilities and technical debt.
- Configuration Management: Infrastructure and application configuration managed declaratively with Ansible, ensuring consistency across all environments.
- Infrastructure as Code (IaC): Terraform manages the immutable provisioning of the underlying virtualization resources.
- Deployment Strategy: Implementing Blue/Green deployments to minimize downtime and provide instant rollback capabilities during updates.
Infrastructure & Operations
- Virtualization Host: Hosted on a self-managed, dedicated Virtual Cloud Server (VCS) for performance predictability and strict data residency control.
- Orchestration: Full stack deployed on a self-managed Kubernetes cluster, ensuring auto-scaling and self-healing.
- Observability: Integrated Monitoring, Tracing, and Logging (M.T.L.) using Prometheus (Metrics) and Jaeger (Tracing). Centralized logging uses Elasticsearch and Logstash for aggregation, with visualization provided by Grafana (metrics dashboards) and Kibana (log analysis).
- Security: Secrets management is centralized using HashiCorp Vault for dynamic credentials and API keys. Network defense is enhanced with Coraza (WAF), which provides real-time application security and strict network segmentation across environments (Dev, Stage, Prod).
Business Features
- Near-Zero Input Automation: Achieve near-zero manual input via secure Open Finance integration and AI-Powered Receipt Scanning (OCR) to automatically capture transactions and data.
- Formal Budgeting (Envelope System): Real-time budget health using the Zero-Based Budgeting methodology, which mandates assigning a purpose to every amount for proactive spending guidance.
- Debt Payoff Simulation: Dedicated debt management module featuring dynamic Amortization Schedules and Payoff Simulation, including Debt Snowball and Debt Avalanche strategies.
- Advanced Commitment Tracking: Specialized systems for managing finite installment bills (Parcels) and indefinite subscriptions (Just-In-Time parcel creation).
- Multi-Tenant Collaboration: Secure Family/Pro tiers with Role-Based Access Control (RBAC), shared wallets, and strict data isolation for collaborative financial management.
Frontend Android
- Modern Design System: Designed with the latest Material 3 Expressive Guidelines for an accessible, cohesive, and modern user experience.
- Core Language: Built on the high-performance Java language, ensuring a robust and stable foundation consistent with the entire application stack.
- Android SDK & Architecture: Utilizing the native Android SDK and structured using the MVVM (Model-View-ViewModel) pattern for clean separation of concerns and high test coverage.
- Security & Offline Data: Securely storing tokens and credentials via the Android Keystore and using Room Persistence Library for robust local data caching and offline resilience.