Multi-Vertical SaaS Foundation
Universal multi-tenant engine (Foundation/) with Percona PostgreSQL Row-Level Security (RLS), column-level AES-256-GCM encryption, and master civil identity hosting pluggable business verticals (Health/, Operations/).
Sovereign IAM & OpenIddict
Centralized Security Token Service (STS) supporting Google Workspace OIDC (ops.gercia.com.br), B2B Web PKCE (app.gercia.com.br), Mobile Social Logins, and hardware station tokens.
Zero-Trust Network Topology
No exposed public ports, EVEO private Docker network segregation (gercia-svc-prd/stg), Cloudflare Tunnels, and Cloudflare Zero Trust WARP access policies.
Architecture Decision Records (ADRs)
Immutable record of architectural design decisions, trade-offs, and monorepo governance models.