Security & SaaS · 2026
Emergency Response SaaS for Travellers
Full-stack security platform connecting travellers to 4,500+ armed response vehicles and 1,060+ medical units across South Africa.
Visit live
The brief.
TravelShield needed a production SaaS platform to sell travel security services in South Africa — armed response, medical assistance, and roadside protection bundled into pay-per-day plans. The platform had to handle user registration, traveller management, a full affiliate partner program with commission tracking, and an admin CMS. All built on a security-first architecture appropriate for a company dispatching emergency vehicles.
How we built it.
We built a Nuxt 4 application backed by Neon PostgreSQL with Drizzle ORM for type-safe database access. The affiliate program alone required 8 database tables — tracking clicks, conversions, payouts, bonus rules, and group-based commission tiers. Authentication uses bcrypt-hashed passwords with session-based auth and email-verified password resets. The design system uses royal blue and gold to signal trust and premium positioning in a market where perception of reliability is everything.
Scope of work
- Customer registration and traveller management with medical info, arrival/departure dates, and destination areas
- Pay-per-day pricing engine — $1.30 to $4.50/day based on trip duration
- Full affiliate partner program — self-registration, unique referral codes, click tracking, conversion logging, payout management, and bonus system
- Admin CMS with traveller database, affiliate management, email templates, and announcement system
- Session-based authentication with bcrypt hashing and email-verified password resets
- 14-table PostgreSQL schema with audit trails and referral tracking
Affiliate infrastructure
The affiliate program is a standalone product within the platform. Partners self-register, receive unique 8-character referral codes, and track clicks, conversions, and earnings through their own dashboard. Admin controls include group-based commission tiers (percentage or fixed), payout processing workflows, bonus rules triggered by conversion milestones, and CSV data export. This isn't a bolt-on — it's the growth engine for the business.
Security-first architecture
When your product is emergency response, the platform itself has to be reliable and secure. We implemented bcrypt password hashing, HTTP-only session cookies with 7-day expiry, email-verified password resets with single-use tokens, and server-side validation on every endpoint. The admin CMS separates user roles (editor vs admin) and logs all actions. No shortcuts on a platform that coordinates armed response vehicles.
A travel security startup now has enterprise-grade infrastructure — user management, affiliate tracking, admin CMS, and a pricing engine — built and deployed in weeks, not months. The same architecture that powers established SaaS products, at a fraction of the cost.