System Architecture

Layered architecture with distinct domain boundaries for security and scalability

Domain-Based Architecture

*.mecentral.io

User-facing services

Public

*.mec.cx

Agent/business services

Restricted

*.mec.link

Source integrations

API Only

*.ntr.al

Internal operations

VPN Only

User-Facing Layer

6 components • Click to expand

Web Application

app.mecentral.io

React + Qwik for resumable apps, user dashboard, document management

React TypeScript Qwik

API Gateway

api.mecentral.io

Type-safe API with tRPC, Zod validation, rate limiting

tRPC Zod Port: 443

Document Processor

process.mecentral.io

OCR, metadata extraction, document type detection

WASM Tesseract

E2E Vault

vault.mecentral.io

Zero-knowledge encryption, client-side only

libsodium WebCrypto

Primary Database

db-prod.mecentral.io

User accounts, metadata, permissions

Neon Postgres Port: 5432

Ledger Store

ledger.mecentral.io

Immutable audit trail, WORM storage

Append-only Hash-chained

Agent/Business Layer

4 components • Click to expand

Agent Portal

agents.mec.cx

Landlord/employer document requests

React SSE

Request API

request.mec.cx

Submit requests, webhooks

REST Webhooks

Verification

verify.mec.cx

Document authenticity validation

Ed25519 SHA-256

Integration Hub

integrations.mec.cx

Connect to ATS, CRM systems

OAuth2 SAML

Source Integration Layer

4 components • Click to expand

Bank Connectors

banks.mec.link

Fetch statements via Plaid/Finicity

Plaid API

Identity Providers

id.mec.link

Connect to IRS, SSA, DMVs

OIDC

Employment APIs

employment.mec.link

Verify employment, fetch pay stubs

Argyle

Document Scanner

scan.mec.link

Mobile OCR and auto-crop

React Native

Internal Operations (VPN Only)

5 components • Click to expand

Admin Dashboard

admin-ce.ntr.al

CS tools, user lookup, fraud detection

React Grafana

Uptime Monitoring

uptimekuma-ce.ntr.al

Service health, alerting

Uptime Kuma Port: 80

Metrics & Logs

grafana-ce.ntr.al

Dashboards, alerting, visualization

Grafana Loki

Complete Technology Stack

Frontend

  • • React 18 + TypeScript
  • • Qwik (resumable apps)
  • • TanStack Query
  • • Tailwind CSS
  • • Vite build system

Backend

  • • Node.js + Bun runtime
  • • tRPC for type-safe APIs
  • • Cloudflare Workers
  • • Durable Objects
  • • Edge Functions

Data & Storage

  • • Neon Postgres
  • • Cloudflare R2
  • • Redis (Upstash)
  • • pgvector for search
  • • S3-compatible storage

DevOps & Security

  • • GitHub Actions CI/CD
  • • Docker containers
  • • HashiCorp Vault
  • • OpenTelemetry
  • • Cloudflare WAF

Infrastructure Specifications

Production Environment

Edge Locations 275+ globally
Database Neon Serverless Postgres
Object Storage Cloudflare R2 (11 9's durability)
CDN Cloudflare Global Network
Compute V8 Isolates (0ms cold start)

Performance Targets

API Response Time <50ms P95
Uptime SLA 99.99%
Concurrent Users 100,000+
Document Processing <2s per document
Notification Delivery <100ms

Built for Scale, Security, and Speed

Enterprise-grade architecture with consumer-friendly experience

Security Details Edge Infrastructure