Xexec needed a platform that could support different client organisations without compromising reliability, auditability, or security. The system had to serve government, accounting, and enterprise users while continuing to evolve over many years.
The challenge
- Support multiple tenants with distinct access patterns, data boundaries, and operational needs.
- Process high-value rewards and transaction workflows with strong auditability.
- Keep the platform stable over a long production life instead of forcing periodic rebuilds.
- Pass recurring security reviews for clients with serious compliance expectations.
How we approached it
Designed for tenant separation
The architecture separated tenant behaviour, access rules, and operational concerns so the platform could grow without every new client becoming a bespoke fork.
Built around audit trails
Access control and transaction activity were treated as core system behaviour. The platform could support review, investigation, and operational accountability from the start.
Operated for longevity
The work was not limited to launch. UME operated and evolved the system over many years, keeping it maintainable as usage, clients, and infrastructure expectations changed.
Outcome
The platform served 4M+ users, processed £50M+ annually, passed every security review conducted over 17+ years, and migrated to the acquiring owner's infrastructure without incident.
Why it matters
- Clients could keep adding tenants and users without funding repeated rebuilds or accepting platform instability.
- Security reviews, audit trails, and access controls reduced operational risk for enterprise and government customers.
- The business retained long-term platform value through acquisition and infrastructure migration, instead of being trapped by fragile legacy software.