CASE STUDYCASE FILE · RH–TSP · VERIFIED BUILD

Full-stack build · e-commerce · trust infrastructure

We built TheSkinProof — Bangladesh's first invoice-verified skincare marketplace.

A production-grade platform that solves a real, dangerous problem: counterfeit skincare. Every product is checked against its physical importer invoice and batch record before it ships — backed by a 2× money-back guarantee. RAITHub designed and engineered the whole system, end to end, and runs it today.

Disclosure: TheSkinProof is the founder's own marketplace, built and run by RAITHub. It is not a client engagement.

5 role-based portals225K+ lines of code217 API endpointsEnglish · বাংলা

The mandate

In Bangladesh, buyers had no way to tell real skincare from fake.

Counterfeit, expired and smuggled products flood the market — some laced with mercury or steroids. The goal wasn't “build a shop.” It was to build trust as infrastructure: a marketplace where authenticity is proven on every single product, not promised in a banner.

The market beforeNo per-product proof. Authenticity was the customer's risk to carry — on Daraz, Facebook and unverified stalls.
What we shippedEvery SKU batch-code checked against the importer invoice, inspected in-warehouse, and labelled invoice-verified — with a 2× refund if a product is ever proven counterfeit.

The build · verification pipeline

A four-gate authenticity process, engineered into the seller-to-shelf pipeline.

GATE 01

Invoice

Stock is refused unless it arrives with an authorised-distributor invoice — matched on HS code, batch and importer registration.

GATE 02

Physical

Warehouse team photographs every carton and inspects seals, holograms and print quality against the brand record.

GATE 03

Ingredient

Formulas cross-checked against a product-checker of BSTI manufacturers, standards and banned substances.

GATE 04

Batch code

Every unit's batch/expiry recorded and made verifiable — surfaced to the buyer and emitted as structured data.

By the numbers

The scope of a serious platform — measured, not estimated.

225K+
Lines of code
~202K TypeScript / React
217
API endpoints
Typed, auth-gated route handlers
5
Role-based portals
Store · admin · seller · warehouse · auth
4
Payment rails
bKash · Nagad · SSLCommerz · COD
134
Bilingual guides
Editorial + SEO/AEO content engine
21
Brand landing pages
Schema-rich, indexable
92
DB migrations
Idempotent, additive
2×
Money-back guarantee
The trust model, productised

The platform

One system, five audiences — each with the tools their job actually needs.

Storefront · buyers

A shopping experience that sells trust

  • AI Skin Quiz → a personalised routine in 60 seconds (AI generator with a deterministic fallback)
  • Auto-account checkout — guests buy by phone, claim the account later
  • Server-side search & filter by concern, skin type, brand, price and SKU
  • Verified-purchase reviews, wishlist, live courier tracking
Trust · fraud · payments

Risk engineering, built in

  • Cash-on-delivery orders are risk-assessed before they're accepted
  • Order-risk controls the team can tune without code changes
  • Per-variant inventory decremented inside the order transaction — no overselling
  • Server-authoritative pricing: the client is never trusted for money
Admin · operations

Run the business from one console

  • Revenue, cost & net dashboard; Cost & Profit (P&L) and purchase costing
  • Draft review & approval, one-page A4 invoices, courier booking (Pathao / Steadfast)
  • Live-editable delivery, COD-advance and promo configuration
  • Role-based access control, audit logging, and web-push alerts
Seller & warehouse

Supply-side tooling

  • Product drafts with variants, media & verification documents; edit-while-live flow
  • Per-size availability, payouts, analytics, web-push alerts
  • Warehouse picking queue and packing with photo verification before dispatch
  • Every seller scoped to their own data, enforced server-side

System architecture

A layered modular monolith — fast to move in, hard to break.

Pages · RSC + ISRedge-cached
↓
Route handlersauth · validation
↓
Actions · servicesdomain logic · transactions
↓
PostgreSQL + Redisnode-pg · row locks

Dependencies flow one way. Money and stock writes are transaction-guarded; policy (delivery, advance, availability) lives in single sources of truth so the storefront and back-office can never disagree.

Core

Next.js 16React 19TypeScriptPostgreSQLnode-pgRedis

Platform

VercelNeonCloudflare R2PWA + Web Push

Integrations

bKashNagadSSLCommerzPathaoSteadfastResendMeta CAPI

Engineering rigor

Built to survive production — not just to demo.

Security

Security is designed in, not bolted on: least-privilege access control on every privileged action, server-side input validation, protected back-office surfaces, and hardened authentication and checkout flows.

Reliability

Money and stock move inside database transactions with row locks and floors; checkout rules are recomputed server-side; post-commit side-effects run via after() so they never block or get dropped.

Performance & cost

ISR edge-caching, content-addressed immutable image caching, a Redis stock layer, and active cost tuning across Vercel and Neon.

Discoverability · SEO / AEO / GEO

Rich JSON-LD (Product, FAQ, Organization), a 134-post bilingual content engine, brand landing pages, dynamic sitemaps, and an llms.txt so AI answer engines can cite the platform accurately.

The takeaway

From a hard problem to a platform people can trust.

RAITHub took TheSkinProof from concept to a comprehensive, production-grade marketplace — verification pipeline, payments, fraud, logistics, three back-office portals and a bilingual content engine — all in one coherent, maintainable system.

R High-integrity systems, built to survive production.