Systems engineering for RayInTheDark's internal operations platform

Engineering across the platform and its connected systems: application and data, integrations, operational AI, infrastructure and releases, and security.

Delivery recordVX-01
Client
RayInTheDark, an ecommerce marketing agency
Scope
Systems engineering for the agency's internal operations platform and the systems connected to it
Runs on
Next.js, TypeScript and PostgreSQL, with Meta, Shopify and Discord integrations
In use
Daily, by the agency's team
Systems engineeringNext.js, PostgreSQL, Meta, Shopify

RayInTheDark runs its client operations on an internal platform: client records, advertising and store data, billing status, staff access, and the tools specialists use to act on that information. VXSec provides systems engineering for that platform.

Most of the work is keeping several systems in agreement. The platform, the agency's project management workspace, Meta, Shopify and the team's Discord each hold part of the picture, and VXSec makes them line up.

Application and data

VXSec built and maintains the foundations the rest depends on: the data model and database, the APIs, sign-in, and the rules that decide which clients and records each person can see. Client data is separated in the database itself, not only in the interface.

The agency's project management workspace remains its source of truth for client status. The platform follows it through scheduled syncs, with limits that hold back an unexpectedly large change instead of applying it automatically. Where the data cannot support a figure, the page says so instead of showing a plausible number.

Operational tools

Staff use the platform every day: a client roster, account and billing views, a workspace for each specialist, advertising performance pages, and an admin area for inviting teammates and managing roles. This is product and workflow engineering, and pages are reworked when the people using them show where they are hard to read or act on.

Integrations

Meta advertising data and Shopify store revenue feed the platform on a schedule. Totals are checked against the source, and an ad account the platform cannot read is shown as unreadable, with the reason, instead of as a client with nothing to report. Store owners connect Shopify through Shopify's own sign-in, and store revenue, not advertising estimates, drives billing thresholds.

Integrations are judged on whether the data means what the page says, not on whether a request succeeded. When advertising data stopped refreshing, VXSec traced the cause through the sync, repaired it, and added freshness checks that flag stale data to a person.

Operational AI

AI at RayInTheDark does defined operational jobs. A client concern monitor uses a model to flag when a client may need attention and alerts the people responsible. Daily digests and ad account alerts reach the team in Discord. An internal assistant answers staff questions in plain language from live platform data, using read-only tools.

Each of these runs inside controls: a budget, the platform's own access rules, so the assistant only answers about clients the person asking is allowed to see, and a separate test environment for experiments.

Infrastructure and releases

Changes reach production through automated tests, review and one controlled release path. Background jobs run through a managed queue, and data freshness checks watch the running system. Production issues are traced to their cause, repaired, and followed by the check that would have caught them earlier.

Security engineering

Security decisions are made as part of the engineering. Access follows each person's role and the clients they work on, credentials are stored encrypted, and releases include automated security checks.

Security reviews of the application, bots and infrastructure produced evidence-backed findings, and the agreed fixes were implemented and rechecked.

VXSec has delivered the platform's foundations, the tools staff use daily, live data connections, operational AI, and a reviewed process for shipping changes.

What needs building or fixing?

Tell VXSec what the system does, what you want to change, and what is getting in the way. Include links if you have them. Within two business days you get a written reply with the next step.

Or email [email protected] directly.

  • You send: what should happen, what happens now, and the systems involved. No diagnosis needed.
  • You get back: a written reply with the next step. For a defined job, a plan and a fixed price.
  • Then: the work, verified and handed over in writing.