Technology
How we build and protect your software.
Quickship’s software is designed, built and supported by our team in Dubai, at D-Tech, Dubai Silicon Oasis. Here is what it runs on, how we write it, and how we keep your data safe.
The stack
Front end, back end and servers.
- Front end
React and TypeScript
The platform screens are built in React with TypeScript, bundled with Vite and Material UI components. This website runs on Next.js with Tailwind CSS.
ReactTypeScriptViteMaterial UINext.jsTailwind CSS - Back end
Laravel, PHP and MySQL
Business logic runs on Laravel (PHP) with REST APIs and token-based authentication. Data lives in MySQL, and heavy work such as carrier bookings and syncs runs in background queues on Redis.
LaravelPHPREST APIsMySQLRedis queuesHorizon - Servers
Hardened Linux servers
The platform runs on Ubuntu Linux cloud servers behind the nginx web server, with HTTPS certificates from Let’s Encrypt. This website is served from Vercel’s global edge network.
Ubuntu LinuxnginxPHP-FPMLet’s EncryptVercel edge network
How we write code
AI-assisted engineering with Claude by Anthropic.
Our engineers work with Claude, Anthropic’s AI model, to write, review and document code. It helps us read large codebases quickly, explain how each part works, and turn a requirement into working software faster.
AI speeds the work up. It does not replace the checks. Every change is reviewed by our team and must pass automated tests and a full build before it reaches production.
- 1UnderstandThe requirement and the existing code are read and explained before anything changes.
- 2WriteCode is drafted with AI assistance and refined by our engineers.
- 3TestAutomated tests and type checks must pass. The platform has over a hundred test files.
- 4ReleaseOnly a change that passes every check is deployed, and it is verified live afterwards.
Cyber security
Security built into the platform.
These protections are part of the platform today.
Encrypted connections
HTTPS everywhere, with only modern TLS 1.2 and 1.3 accepted, and HSTS so browsers never fall back to an unencrypted connection.
Two-factor sign-in
Accounts can be protected with a second factor from an authenticator app.
Hashed passwords
Passwords are stored as one-way hashes, never as readable text.
Role-based access
Every user has roles and permissions, so each person sees and changes only what their job needs.
Encrypted credentials
Carrier and integration credentials are stored encrypted in the database, not as plain text.
Audit trails
Sensitive actions are written to audit logs, and money and stock movements are kept in ledgers where entries are added, not edited.
API rate limiting
Requests to the API are rate limited to stop abuse and runaway integrations.
Verified webhooks
Incoming events from platforms such as Shopify and Stripe are checked against their signatures before anything is processed.
Browser security headers
A strict content security policy, protection against clickjacking and content sniffing, and no server version disclosed.
Data protection
Your data stays your data.
Businesses in the UAE and Saudi Arabia trust us with orders, customers and cash. We treat that data accordingly.
- Separated by accountEach business sees only its own data. Access inside a business is limited by role.
- Collected for a purposeWe process customer and order data to run the service you signed up for, not to sell or share it.
- Protected in storage and in transitConnections are encrypted, credentials are encrypted at rest, and passwords are hashed.
- Built with the law in mindWe design our handling of personal data around the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and Saudi Arabia’s Personal Data Protection Law.
- Questions answeredAsk us anything about how your data is handled at info@quickshipme.com.
See what we build on this stack: software modules, custom software and app development.
Tell us what your business needs.
A call with the team in Dubai. We will recommend the module, plan or build that fits, and tell you what it costs.