Architecture brief

How WakeTech.ai deploys
to enterprise customers.

A technical brief for Crane Worldwide Logistics IT leadership. Written for engineers and architects evaluating WakeTech.ai against shared-codebase SaaS alternatives.

The shared-codebase problem

One codebase, no customization, configuration only.

Modern cloud-native TMS vendors operate on a single multi-tenant codebase where every customer runs identical software against a logically-separated slice of a shared database. The vendor philosophy is one codebase, no customization, configuration only.

This model is efficient for the vendor and appropriate for customers whose operations fit inside the vendor's opinionated workflow. It fails when a customer organization cannot be represented by the vendor data model. Enterprises with hierarchical sub-divisions, federated regional offices, multiple legal entities, or industry-specific workflows that fall outside the vendor's core assumptions hit a ceiling that no amount of configuration can break through.

The WakeTech model

Four components. One coherent architecture.

WakeTech.ai operates on a hybrid architecture that preserves the engineering discipline of a single canonical platform while giving each enterprise customer the isolation, customization flexibility, and data sovereignty they need.

01
Shared rigid core

All WakeTech.ai customers run the same platform at the same version. Core is a single canonical codebase maintained by the WakeTech.ai engineering team. Core improvements, security patches, and new features propagate to every customer on a regular release cadence. No customer modifies core. No customer runs a forked version. This discipline is what lets us maintain high development velocity, predictable quality, and defensible security posture as we scale.

02
Dedicated per-customer deployment

Each enterprise customer receives a dedicated deployment. Your own virtual infrastructure. Your own database. Optional landing in your own Azure tenant for strict data residency or regulatory requirements. Your own deployment lifecycle — upgrades happen on a schedule that works for your change management process. You are not forced to upgrade the day WakeTech.ai releases a new core version. You are not blocked from upgrading because another customer is on an older version.

03
Customization layer

Customer-specific behavior lives in a dedicated customization layer that sits alongside core, never inside core. Workflow extensions, custom data model extensions, custom reports and dashboards, customer-specific integrations to legacy systems, organizational model overrides for customers whose real-world structure exceeds the core platform's default assumptions, and custom UI components rendered inside core pages through defined extension slots. This is where the enterprise value lives for large customers.

04
Clean boundary between core and customization

The line between shared core and customer customization is enforced by engineering discipline, not convention. Core publishes a versioned extension API and commits to backward compatibility within a major version. Customization layers depend only on the published API, never on core internals. Core and customization layers deploy independently. The core test suite runs without any customer extensions loaded. Customization test suites run against a known core version and alert on incompatibility before production.

What this means for Crane

You own your data. You own your customizations. You do not own the core.

You own your data

Every row, every file, every log. Stored in your database, in your deployment, under your control. Portable on request.

You own your customizations

The extension layer code that represents your specific business processes belongs to you. If you ever leave WakeTech.ai, you take it with you.

WakeTech.ai owns the core

The shared core platform is licensed to you as part of your deployment. You benefit from every core improvement we ship. You are never responsible for maintaining core yourself.

The trade: shared core gives you leverage, the customization layer gives you control, and the dedicated deployment gives you isolation. You are not a tenant in someone else's database. Your data never mixes with another customer's data. Your performance is not affected by another customer's workload. Your security posture is not coupled to another customer's security posture.

How customizations get funded

Generality decides the home, not who paid.

When an enterprise customer funds a new capability, WakeTech.ai evaluates whether it belongs in shared core or in the customer customization layer. The decision is based on generality, not who paid.

Broadly useful capabilities (hierarchical division modeling, multi-currency support, enhanced customs documentation) become part of shared core. Every WakeTech.ai customer eventually benefits. The funding customer gets the feature first, gets implementation priority, and gets recognition. Pricing reflects that the capability will be amortized across the platform.

Customer-specific capabilities (a particular legacy ERP integration, an internal GL code mapping, a proprietary carrier scoring algorithm, a compliance workflow unique to the customer) live in the customer customization layer. They are built to the customer's specification, maintained as part of the customer deployment, and do not appear in any other customer environment.

Security and compliance

Isolation at every layer.

Data isolation

Each customer's data resides in a dedicated database with no cross-tenant queries possible at the infrastructure level, not just the application level.

Network isolation

Each deployment runs in its own network perimeter with customer-controlled ingress and egress rules.

Credential isolation

Customer credentials, API keys, and service account tokens never touch another customer deployment.

Compliance boundary

Deployment can live in your Azure tenant. WakeTech.ai is never a data processor for customers who require data to remain under direct corporate control.

Blast radius containment

A security incident in one customer deployment cannot propagate to another. A database corruption event in one deployment cannot affect another.

Audit and observability

Each deployment has its own audit log, its own monitoring, its own backups. You receive direct read access to your own operational telemetry.

Responsibility split

Who maintains what.

ComponentMaintained by
Shared core platform codeWakeTech.ai
Core security patches and vulnerability responseWakeTech.ai
Core performance optimizationWakeTech.ai
New core features that benefit all customersWakeTech.ai
Customer-specific customization layer codeWakeTech.ai delivered, customer owned
Customer database contentsCustomer
Customer integrations to external systemsWakeTech.ai built, customer owned
Customer configuration of core settingsCustomer
Deployment infrastructure (VMs, databases, networking)WakeTech.ai or customer, depending on deployment model
Deployment upgrades and core version managementWakeTech.ai, coordinated with customer change management

For an enterprise that cannot be represented by a vendor opinionated data model, this is the only architecture that works at scale.