Turning benefit points that had nowhere much to go into a local-specialty gift people actually want. KAITECH built a single e-commerce platform out of a genuinely complex tangle of payment, authentication and external platform integrations.

■ The Challenge

This client provides an employee benefits program to businesses, and operated two proprietary point systems awarded to employees — but where those points could actually be spent was limited, leaving much of their value untapped. The client also had no channel of its own for hometown-tax-style donations or local specialty purchases, so employees who wanted this kind of service had to leave for a general external e-commerce site, cutting off the connection to the client’s own benefits program entirely. There was likewise no dedicated channel for the exclusive local specialty products the client had relationships to distribute. The build needed to reuse the client’s existing membership base — identity, name, address — without the new system taking on any PII of its own.

■ Our Approach

KAITECH built a Laravel-based web application with the member-facing site and the admin-only management dashboard fully separated. Authentication is delegated to the client’s own identity platform via OIDC (PKCE), so the system holds no personal information itself and only ever references a member ID. Payment combines an external payment gateway (3-D Secure 2.0) with a multi-source model that lets a customer charge both proprietary benefit-point systems at once, alongside the card payment. The product catalog, inventory and fulfillment are integrated through an external local-specialty platform API, and the build covers the full donation-and-purchase experience end to end: tax deduction certificate issuance (in an XML format that follows year-specific rules), one-stop exception registration, and a tax deduction simulator. Infrastructure runs on AWS, combining ECS Fargate, RDS, ElastiCache, SQS, S3 and CloudFront, with CI/CD on GitHub Actions using OIDC role-based authentication, and it meets production-grade security requirements: Secrets Manager, KMS encryption, WAF, and IP restriction on the admin dashboard.

■ Results & Highlights

  • Created a genuinely new use for benefit points that previously had limited redemption options: local specialty products
  • Unified three separate external systems — payment, the specialty-goods platform, and the client’s own identity platform — into a single purchase experience
  • Delivered a multi-source payment model that charges a card and two different point systems in the same transaction
  • Separated the member site from the admin dashboard to balance security with operability
  • Covered the administrative side of donations too: tax deduction certificate issuance and one-stop exception registration

■ Why KAITECH Was The Right Fit

This was a demanding project that called for real accuracy, a transparent process and a high security bar. KAITECH’s discipline is to turn any ambiguity in a spec into a concrete question rather than proceed on an assumption, and to track it through to resolution. On a project juggling this many external pieces — payment, authentication, the specialty-goods platform and two separate point systems — that QA discipline is exactly what let the client hand over complex technical implementation with confidence, and it’s what carried the collaboration through multiple project phases.

■ Tech Stack

PHP (Laravel), Blade, Tailwind CSS, Vite, MySQL (AWS RDS), Redis (ElastiCache), AWS SQS, AWS S3, AWS ECS Fargate, CloudFront, GitHub Actions