Enterprise Systems

B2B Document Exchange System

A secure document exchange platform for trading partners — cloud coordination, on-premise deployment, encrypted transmission, and full audit trails.

Project Overview

150
API Endpoints
Cloud 52 + Local 98
237
Automated Tests
API 215 + E2E 4 + Integration 18
23
Stored Procedures
Cloud 8 + Local 15
3
Database Instances
1 Cloud + 2 Local

Challenges

The difficulty of B2B systems lies in security, standardization, and cross-organization trust mechanisms

01

Cloud + Local Dual-layer Architecture

Not a simple SaaS — each vendor runs a Local system in their own environment, while the Cloud handles vendor registration, approval, and connection coordination. The two layers must communicate securely and sync data while ensuring complete data isolation between vendors.

02

Cross-vendor Secure Transmission

Trading partners exchange purchase orders, shipping documents, and other confidential business files. Transmission must be encrypted, recipients must verify the source, and every operation must leave an audit trail.

03

Multi-role Permission Management

Admins, regular users, vendor representatives — three roles with different permissions on both Cloud and Local. Plus department-level permission groups controlling who can see which documents and perform which actions.

04

Document Format Standardization

Different vendors use different Excel formats. The system must parse, validate, and transform documents to ensure content meets standards and fields map correctly. Supports 6 document types and 119 field definitions.

Cloud + Local Distributed Architecture

Cloud coordination, on-premise computing — balancing convenience and data sovereignty

Cloud (Cloud Server)

  • 11 controllers, 52 API endpoints
  • Handles vendor registration, trading partner matching, connection coordination
  • 6 core data tables, 8 stored procedures

Local (On-premise Deployment)

  • 16 controllers, 98 API endpoints
  • Handles document management, upload validation, peer-to-peer exchange, delivery date responses
  • 11 core data tables, 15 stored procedures
  • Each vendor runs an independent instance with complete data isolation

Cloud and Local communicate via REST API — Local queries the Cloud for vendor lists, Cloud calls back to Local to sync document status.

Dual-standard Encryption Architecture

Backward compatibility meets forward-looking security

AES-256 CBC

Legacy password encryption standard ensuring backward compatibility

AES-GCM + PBKDF2

Newly introduced enhanced encryption standard providing stronger integrity verification

Secure Memory Management

Proactively clears memory after processing sensitive data to prevent residual exposure

237 Automated Tests

Not "write tests after the fact" — systematic coverage of every workflow

Test CategoryTest Count
Registration & Approval Flow10 tests
Login Verification10 tests
Password Management21 tests
Permission Management16 tests
Invitation Flow18 tests
Vendor Alias Management12 tests
Document Upload14 tests
Sending Flow15 tests
Receiving Flow16 tests
Delivery Date Response10 tests
Dashboard & Settings16 tests
Stored Procedure Consistency12 tests
Edge Cases & Security10 tests
Roles & Collaboration27 tests
End-to-end Full Flow8 tests
Total215 tests all passing

Key Metrics

Controllers
27Cloud 11 + Local 16
API Endpoints
150Cloud 52 + Local 98
Data Tables
17Cloud 6 + Local 11
Stored Procedures
23Cloud 8 + Local 15
Automated Tests
237API 215 + E2E 4 + Integration 18
Test Pass Rate
100%
Document Types
6
Field Definitions
119
Encryption Standards
2AES-CBC + AES-GCM
Deployment Environments
3Dev / Staging / Production

Results

237 Tests All Passing

Every business workflow has automated verification, from registration to delivery date response

Dual-layer Encryption Standards

Legacy systems remain backward compatible while new features adopt stronger encryption

Multi-vendor Independent Operation

Each vendor runs their own Local system with complete data isolation

Complete Audit Trails

Who did what and when — everything is logged and traceable

Tech Stack

ASP.NET CoreSQL ServerREST APIAES-256AES-GCMPBKDF2Excel ParsingDockerCI/CDAutomated Testing

Related Cases

Fintech

Buy Now Pay Later System

Fintech platform with multi-role permissions and payment integration

Healthcare

Patient Information Management System

Multi-system integration platform for a major hospital

Need an enterprise system or B2B platform?

No spec sheet needed, no waiting for quotes. Describe your needs and Mia will analyze them in real time.

I want a document exchange systemB2B encrypted file transferMulti-vendor permission managementHow to apply for a free POC?