VestedExchange

Overview

VestedExchange is a sophisticated multi-tenant data management and analytics platform designed for enterprises requiring secure, role-based access to their business intelligence. Built as a serverless solution on AWS, it enables clients to seamlessly access, manage, and analyze their analytical data through intuitive low-code dashboards while maintaining strict security and complete data isolation between tenants.

My Role & Contribution

Position: Full Stack Developer Team Size: Solo Engagement

Key Responsibilities

• Architecture Design: Serverless AWS Lambda + API Gateway with FastAPI backend
• Security Implementation: OAuth2/JWT authentication, row-level security, RBAC
• Snowflake Integration: Data pipelines, OAuth-based database access, schema management
• Dashboard Development: Appsmith-powered low-code analytics interfaces

Core Features

Secure Data Pipeline

• Automated data ingestion from CSV sources to Snowflake data warehouse
• Schema management with dedicated database and warehouse configurations
• Real-time data synchronization with client-specific isolation

Multi-Tenant Security Architecture

• Three-tier role hierarchy: SUPERADMIN, CLIENTADMIN, CLIENTENDUSER
• Row-level security: Database-enforced data isolation using Snowflake policies
• OAuth2 authentication: Auth0 integration with JWT token management
• Snowflake OAuth: Token-based database access with role-scoped permissions

Low-Code Dashboard Platform

• Appsmith-powered dashboard builder for rapid development
• Pre-built analytics dashboards (Google Analytics, Facebook Analytics, custom)
• Multiple workspace segregation (Auth, Admin, Client applications)
• Custom query support with parameterized SQL for security

Enterprise Features

• User lifecycle management (create, activate, deactivate, password reset)
• Client onboarding with automated provisioning
• Comprehensive audit logging via CloudWatch
• RESTful API for programmatic access

Technical Architecture

Client Browser → Appsmith Dashboards → Auth0 OAuth2
                         ↓
              AWS API Gateway (HTTP API)
                         ↓
              AWS Lambda (FastAPI + Mangum)
                         ↓
              Snowflake Data Warehouse

Security Compliance

• Authentication: OAuth2 with Auth0 identity provider
• Authorization: Role-based access control (RBAC)
• Data Protection: Row-level security enforced at database level
• Injection Prevention: Parameterized queries throughout
• Audit Trail: Comprehensive logging and monitoring