The Multi-Tenant System of Record for Vouchers
Cloud-hosted, white-label ready, and audit-grade. UVS delivers dedicated voucher ledgers, high-concurrency two-phase redemptions, and automated reconciliation for platforms and enterprise brands.
x-uvs-access-key: ak_ten_live_9f4e2a
x-uvs-timestamp: 1785072041
x-uvs-nonce: e3a10c9d
x-uvs-signature: HMAC-SHA256(...)
idempotency-key: req_lock_8849102
{
"request_id": "req_lock_8849102",
"coupon": "9K7X-4M2P-8W1Q-N6ZT",
"merchant_id": "mch_singapore_store_01",
"order_amount": 8500,
"currency": "SGD"
}
200 OK
{
"ok": true,
"redemption_id": "red_8f29c4",
"coupon_id": "cpn_9a7b3c",
"state": "LOCKED",
"discount_amount": 1500,
"currency": "SGD",
"expires_at": "2026-08-15T12:05:41Z"
}| Template / ID | Discount Rule | Scope | Status |
|---|---|---|---|
|
Summer Mega Sale tpl_8f2a1c |
PERCENTAGE 20% Cap SGD 15.00 |
ALLIANCE (12 Merchants) | ACTIVE |
|
VIP Welcome Coupon tpl_3b9e4d |
FIXED SGD 10.00 Min SGD 50.00 |
SINGLE_MERCHANT | ACTIVE |
Isolated VPC Deployment, Custom Branded for Your Business
Every License provisions a dedicated execution boundary with complete compute and database isolation in AWS Singapore. Deliver a native branded experience with custom hostnames, tailored portals, and zero resource contention.
Custom Domain Binding
Map your own corporate domain (e.g.
vouchers.yourbrand.com) via Cloudflare edge routing
with automatic SSL management.
Dedicated AWS Singapore VPC
Complete tenant data residency and security isolation with dedicated ECS Fargate tasks and Amazon Aurora Serverless storage.
Dynamic Portal Branding
Inject your brand logos, visual theme, and transactional email identities at runtime without maintaining custom code forks.
7×24 Managed Operations
Continuous health telemetry, automated database snapshots, and managed SLA response times with zero infrastructure overhead.
Built for High Concurrency, Fraud Prevention, and Scale
UVS replaces error-prone custom voucher modules with a battle-tested authoritative engine. From cryptographic code minting to transactional settlement data supply, every subsystem is engineered for consistency.
Batch Minting & Code Security
Generate millions of cryptographically randomized bearer voucher codes asynchronously. Raw codes are protected with AES-256 encryption at rest and queried via secure lookup tokens.
- High-volume asynchronous sharded minting (100k to 1M+ per batch)
- Frozen template snapshots preserve issuance rules permanently
- Instant batch freeze & unfreeze operational safeguards
Multi-Merchant & Alliance Scoping
Define hierarchical store and alliance boundaries within your tenant. Vouchers can be strictly limited to single merchants or accepted across dynamic brand alliances.
-
Scope enforcement:
SINGLE_MERCHANTvsALLIANCE - Snapshot membership frozen at issuance time prevents scope drift
- Tenant-first data isolation across all read and write boundaries
Two-Phase Real-Time Redemption
Prevent double-spending under high concurrency. Point-of-Sale and checkout systems lock the voucher during order creation and confirm upon payment, with automatic lock release on cancellation.
- Sub-50ms lock and confirmation latency for checkout flows
- Guarded conditional updates eliminate race conditions
- Single-phase direct redemption option for streamlined POS setups
Authoritative Ledger & Reconciliation
Every status change is an immutable event written to an append-only ledger. Generate daily reconciliation files and discrepancy feeds keyed to the tenant's local settlement timezone.
- Downstream settlement data supply with exact discount breakdowns
- Transactional Outbox ensures at-least-once signed webhook delivery
- Daily cutoffs anchored to tenant settlement timezones
Status Is the Materialized Result of an Immutable Ledger
Vouchers are minted directly in the ISSUED state with
frozen snapshots. Every transition is an atomic conditional
operation backed by an event stream. Two concurrent requests can
never redeem the same voucher.
LOCKED transaction safely reverts the
voucher to ISSUED.• Post-checkout refunds append an immutable
REVERSED record without altering historic events.
Inside UVS (The System of Record)
- Multi-tenant data isolation & API credentials
- Voucher templates, rules, and asynchronous batch minting
- Code encryption, bearer security, and anti-enumeration checks
- Two-phase atomic redemption, cancellation, and reversal
- Append-only event ledger and timezone-aligned reconciliation files
Outside UVS (Integrated Downstream)
- Funds settlement, bank payouts, and fee splitting (DG / Payment rails)
- End-user delivery channels (SMS, WhatsApp, QR codes, H5 claim pages)
- Payment collection processed via merchant POS gateways
- Merchant KYC onboarding and corporate legal vetting
Built Upon Strict Engineering Invariants
- Every write is idempotent
-
All mutating endpoints mandate an
idempotency-key. Retrying a request with identical parameters replays the recorded initial response without re-executing business logic, preventing double redemptions during network drops. - Callbacks are at-least-once
-
Voucher state transitions write directly to a Transactional
Outbox within the same database transaction. Events are signed
with HMAC-SHA256 and retried reliably, with full recovery
available via
GET /v1/events. - The ledger is append-only
- The voucher status column is a materialized view of its event stream. The exact state at any historical timestamp can be deterministically rebuilt from raw events, providing an audit-proof ledger for financial balancing.
- Enterprise data residency
- All customer voucher and redemption data resides persistently in AWS Singapore with strict role-based access control, automated backups, and one-click standard CSV/JSON data export.
Rapid Deployment in Four Predictable Steps
Get your dedicated cloud environment up and running with standardized provisioning, sandbox testing, and managed go-live support.
Provision VPC
Automated spin-up of your isolated ECS compute cluster and Aurora Serverless database in AWS Singapore.
Domain & Branding
Bind your custom corporate hostname, configure SSL, and apply your visual identity across the Operations Portal.
API & UAT Sandbox
Receive Tenant API credentials (HMAC-SHA256), connect test POS systems, and verify webhook event callbacks.
Go-Live & 7×24 Ops
Seamless transition to production with active monitoring, automated backup routines, and managed operational support.
Ready to Deploy Your Dedicated Voucher System?
Contact our solutions engineering team to evaluate your volume requirements, schedule a technical walkthrough, or request a dedicated sandbox environment.