Enterprise SaaS
Multi-tenant B2B platforms with SSO, RBAC, audit logs, and the compliance surface enterprise buyers require from day one.
Certus Web Solutions · The product studio
Ship the product. Not the prototype.
Certus Web Solutions (CertusWS) is the Certus ITM arm dedicated to building and operating SaaS — enterprise-grade and consumer-facing — end-to-end. Same senior team, same SLAs, productized.
The studio model
One team, the whole product lifecycle.
Discovery, design, engineering, infrastructure, and 24/7 operations — under one accountable lead. You don't manage four vendors; you manage one outcome.
build :: #4821 main passed
tests :: 1,284 / 1,284 green
deploy :: eu-west · us-east shipped
release v2.14.0 100%
14:02migration applied ✓ 14:04canary 5% → 100% 14:07SLO check passed ✓
Consumer apps & web
Mobile-first products built for engagement and scale. Native iOS / Android plus responsive web — designed by people who ship to app stores every month.
Internal platforms
Bespoke back-office tools, admin consoles, and operations dashboards that replace the spreadsheet your team has been hating for years.
Identity & access
SSO, MFA, SCIM provisioning, role-based access, and audit logging — built once, reused across your product portfolio.
Billing & payments
Stripe, MercadoPago, OXXO Pay, manual invoicing, dunning, revenue recognition. The unsexy plumbing every SaaS eventually needs.
Day-two operations
Once your product is live we don't disappear. Monitoring, on-call, releases, and a quarterly product-health report you actually read.
Why CertusWS, not an agency
A product studio backed by an IT firm — that changes everything.
Most agencies build the front-end and hand you a Heroku account. We design the architecture, ship the product, run the infrastructure, hold the on-call pager, and renew the SOC 2 report. Same team. Same accountability.
What you get
-
A real PM, not an account exec
Your project lead has shipped products before — they argue with you when you're wrong.
-
Code you actually own
Your repo, your cloud account, your domain. We can hand off cleanly any time — and it's in the contract.
-
Enterprise-ready from sprint one
SSO, audit logs, RBAC, data residency. Sales-blockers we removed years before your competitor faces them.
-
Operate or hand-off, your choice
Run it with us under an SLA — or take it in-house when your team is ready. We don't lock you in.
Shipped & running
Products we designed, built, and still operate.
Not case studies — seven live platforms with their own customers, each running in production today across identity, compliance, invoicing, ERP, web infrastructure, analytics and AI. Built by CertusWS, operated by the Certus ITM infrastructure team. The people who wrote the code are the people carrying the pager.
SafeCertus
Identity & accessAn OpenID Connect identity provider with passwordless MFA. Native apps for iOS, Android and Windows — including a pre-login Windows credential provider — plus integration SDKs so third-party applications can adopt it directly.
Designed & built by CertusWS · Operated by Certus ITM safecertus.com →
Tracenium
Inventory & complianceIT asset inventory and compliance tracking. A cross-platform endpoint agent for Windows, macOS and Linux reports to a real-time control plane, with managed iOS and Android clients for mobile fleets.
Designed & built by CertusWS · Operated by Certus ITM tracenium.com →
inveid
E-invoicing · CFDIMulti-tenant electronic invoicing for Mexico: CFDI stamping against the SAT, subscription billing, and a separate portal where recipients retrieve their own documents without an account.
Designed & built by CertusWS · Operated by Certus ITM inveid.com →
Bridnext
ERP integrationMulti-tenant ERP with a purpose-built connector into Oracle JD Edwards on WebLogic — bringing a modern web layer to an incumbent ERP without replacing it.
Designed & built by CertusWS · Operated by Certus ITM bridnext.com →
Beytrax
CMS & hostingThe system underneath a web presence: a multi-tenant CMS, custom-built static sites, managed cloud hosting with a global CDN, and self-renewing SSL with DNS managed end to end. One vendor, one predictable invoice.
Designed & built by CertusWS · Operated by Certus ITM beytrax.com →
InsightEntry
Reporting & monitoringA secure workspace for publishing Power BI, JSX and AI-built reports to the right audience without distributing files or exposing infrastructure — and for monitoring availability, latency, certificates and on-prem services in real time, opening incidents automatically.
Designed & built by CertusWS · Operated by Certus ITM insightentry.com →
Plauken
AI assistantA public Q&A chat assistant for websites, grounded in your own FAQs, documents and page content rather than generic text. Installs with a single script tag and isolates itself in a Shadow DOM — no style conflicts, no secrets in the browser. When it doesn't know something it says so and hands off, instead of making it up.
Designed & built by CertusWS · Operated by Certus ITM plauken.com →
The stack
Opinionated defaults. Negotiable when it matters.
Frontend
- Next.js · TypeScript
- React Native (Expo)
- Swift · Kotlin
- Tailwind · CSS architecture
Backend
- Node.js / NestJS
- .NET 8
- Go · Python
- GraphQL · REST · gRPC
Data
- PostgreSQL · MySQL
- Redis · Elasticsearch
- BigQuery · Snowflake
- Microsoft Fabric · Databricks
Cloud
- Azure · AWS
- Static Web Apps · Plesk
- Kubernetes · Docker
- Terraform · Bicep
DevEx
- GitHub Actions · Azure DevOps
- Linear · Notion
- Sentry · Datadog
- Storybook · Playwright
Identity & pay
- Auth0 · Entra ID
- Keycloak (self-hosted)
- Stripe · MercadoPago
- OXXO Pay · SPEI
