Stack & infrastructure

What runs WakeTech.ai.

A technical inventory for Crane Worldwide Logistics IT leadership. Enough detail to evaluate the platform. A deeper due-diligence packet is available under NDA on request.

Cloud and infrastructure

Microsoft Azure, dedicated per customer.

WakeTech.ai runs on Microsoft Azure. Every enterprise customer receives a dedicated deployment consisting of their own compute, their own storage, and their own database. No shared infrastructure, no shared schema, no noisy neighbor. For customers with strict data residency or compliance requirements, deployment can land inside the customer's corporate Azure tenant under their own billing and governance.

The deployment automation is infrastructure-as-code, so spinning up a new enterprise customer environment is a repeatable and audited process, not a manual click-through.

Cloud provider
Microsoft Azure
Operating system
Ubuntu Linux LTS on Azure virtual machines
Container runtime
Docker for service isolation and portability
Reverse proxy
nginx for TLS termination, routing, and rate limiting
Process supervisor
PM2 for Node.js service lifecycle and crash recovery
Deployment model
Dedicated per-customer, optional customer-tenant landing
Application platform

TypeScript, Node.js, Next.js.

The core platform is written in TypeScript on Node.js, served through Next.js for the web application layer. TypeScript enforces type safety across the codebase, which materially reduces the class of bugs that reach production. Next.js gives us server-side rendering for fast initial page loads, API route handlers for integration endpoints, and a static build pipeline that deploys as a single standalone artifact.

Language
TypeScript (strict mode)
Runtime
Node.js LTS
Web framework
Next.js with React UI framework
UI framework
Tailwind CSS with a locked design system
Build output
Standalone production bundle, container-ready
Package management
npm with lockfile-enforced reproducibility
Data platform

Microsoft SQL Server. Dedicated per customer.

Transactional data lives in Microsoft SQL Server on Azure. Every customer has a dedicated database instance. No shared database. No logical tenant separation inside a common schema. SQL Server was chosen because it is the industry standard for freight and logistics accounting workloads, integrates cleanly with Microsoft Azure, and has a mature backup and point-in-time recovery story that enterprise procurement teams are already familiar with.

Object storage for documents, BOL images, EDI archives, and other binary artifacts uses Azure Blob Storage with per-customer containers and server-side encryption. Retention policies and lifecycle rules are set per customer according to their compliance requirements.

Transactional database
Microsoft SQL Server on Azure, dedicated per customer
Object storage
Azure Blob Storage, per-customer containers
Backup
Automated point-in-time recovery with customer-defined retention
Data portability
Customer can extract their full dataset on request
AI and intelligence

Anthropic Claude. Proprietary agent framework.

The WakeTech.ai AI crew runs on Anthropic Claude models via the Anthropic API. Claude was selected for three reasons: strong enterprise security posture (SOC 2 Type II, no training on customer data, zero data retention available), high reasoning quality for operational decision-making tasks, and a mature tool-use API that supports the agent architecture the crew is built on.

Agents are stateful services with their own memory stores, skill catalogs, and approval thresholds. Each agent (Lane, Ada, Pulse, Scout, Ledger, Intake, Sentinel, Apollo, Rune, Vera) is scoped to a specific operational domain and earns autonomous authority through demonstrated performance against an agreement-rate threshold set per workflow.

Corridor intelligence (WakeSignal) is a separate analytical layer scoring US freight corridors against NOAA weather data, EIA energy signals, USDA agricultural signals, AIS vessel tracking, and a proprietary hurricane forecast model. This runs on our own infrastructure, not through a third party, and does not ship customer data to external analytics services.

LLM provider
Anthropic Claude (enterprise API)
Data retention with provider
Zero data retention available for customer-sensitive workflows
Agent framework
Proprietary, built on Anthropic tool use
Approval model
Graduated autonomy with performance thresholds and operator oversight
Routing and mapping

Self-hosted Valhalla. Zero per-request fees.

Truck routing is powered by a self-hosted Valhalla routing engine running against OpenStreetMap data for North America. Valhalla is a respected open-source routing project used by Mapbox, government agencies, and commercial logistics operators. Self-hosting means WakeTech.ai customers pay zero per-request fees for routing, zero per-seat licensing, and get sub-second route calculation with full truck profile support (vehicle dimensions, weight, hazmat, bridge restrictions, time-of-day access rules).

Map rendering uses PMTiles with MapLibre GL for vector tile delivery. PMTiles is a single-file archive format that serves vector tiles over HTTP range requests without a tile server dependency. MapLibre is the open-source fork of Mapbox GL and does not require a Mapbox access token or per-view billing.

Routing engine
Valhalla, self-hosted, North America truck profile
Map data source
OpenStreetMap, refreshed on a regular cadence
Tile format
PMTiles served over HTTP
Map renderer
MapLibre GL, no third-party API keys required
Integration platform

WakeEDI in production. 94 external integrations.

EDI is handled natively by WakeEDI, our production EDI processing service. It currently handles the core freight transaction set: 204 tenders, 990 tender responses, 214 shipment status updates, and 997 functional acknowledgments. WakeEDI supports SFTP and AS2 transport, accommodates partner-specific quirks without custom development per partner, and logs every message for audit and replay.

General-purpose integration uses a combination of REST APIs exposed by core, webhook event subscriptions for async notification, and customer-specific adapters that live in the customization layer. WakeTech.ai integrates with 94 distinct external services today, including DAT, Highway, Greatwide, FMCSA, NHTSA, NOAA, Google Places, ElevenLabs, Twilio, TomTom, Mapbox, OpenDock, Ryder, and TruckerTools.

EDI
WakeEDI native, SFTP and AS2 transports
EDI transaction sets
204, 990, 214, 997, with others added as needed
API surface
REST with versioned contracts
Async integration
Webhook subscriptions, signed payloads
Email and messaging

Self-hosted JMAP. No per-mailbox licensing.

WakeTech.ai operates its own self-hosted JMAP and IMAP mail infrastructure for agent mailboxes, dispatch communication, and transactional customer email. Running mail on our own infrastructure keeps sensitive freight communication out of third-party mail providers, avoids per-mailbox licensing costs, and gives each customer the option of a dedicated mail domain for their deployment.

Outbound notification supports SMS and voice through an A2P 10DLC compliant messaging pipeline for driver and dispatch alerts. Voice agents for live carrier negotiation use enterprise-grade real-time voice synthesis.

Mail server
Self-hosted JMAP and IMAP, per-customer domain option
Transactional email
Native SMTP with DKIM and DMARC alignment
SMS
A2P 10DLC compliant pipeline
Voice
Enterprise real-time voice synthesis for agent workflows
Observability and operations

Sentinel watches every service, every region.

Every deployment runs its own monitoring, logging, and alerting stack. Infrastructure metrics, application logs, and business event streams are collected per customer and retained according to customer policy. The WakeTech.ai Sentinel agent provides automated infrastructure health monitoring and can escalate incidents before they become customer-visible outages. Customers have direct read access to their own operational telemetry.

Monitoring
Per-deployment health, performance, and business metrics
Logging
Structured application and access logs, customer-scoped retention
Alerting
Automated through Sentinel agent with operator escalation
Backups
Automated with customer-defined retention windows
Security posture

Isolation first. Encryption everywhere.

Isolation first

Each customer deployment is a separate network perimeter. There is no cross-tenant query path at the infrastructure level, only at the application level, which itself is scoped to a single customer database.

Encryption everywhere

TLS 1.2 or higher for all traffic in transit. Encryption at rest for every database and every storage container. Customer-managed keys available on request.

Least privilege

Application service accounts have only the database permissions they need. Schema changes require elevated credentials held by a separate operations account. Secrets are stored in Azure Key Vault.

Audit trail

Every material action in the platform is logged with actor, timestamp, and affected entity. Audit logs are append-only from the application perspective and tamper-evident through infrastructure controls.

A due-diligence packet covering vulnerability response policy, penetration test history, dependency management, and supply chain controls is available under NDA on request.

What we do not use, and why

A few deliberate non-choices.

Enterprise IT teams evaluating WakeTech.ai often ask about things we explicitly do not use.

No shared multi-tenant database

Every customer has their own database instance. We do not mix customer data in a shared warehouse with logical tenant filtering. This is a deliberate rejection of the dominant cloud-native SaaS model. The trade-off is a slightly higher per-customer infrastructure footprint in exchange for infrastructure-level data isolation that application bugs cannot compromise.

No per-request commercial mapping APIs at runtime

We do not call Google Maps, Mapbox Directions, or PC*Miler for routing or map rendering in production. All map and routing capability is self-hosted. Predictable cost, no per-seat licensing, no per-query bill that scales with customer revenue.

No customer data in third-party analytics platforms

We do not ship customer operational data to general-purpose analytics or BI tools outside the customer deployment. Analytics runs inside the dedicated environment and does not leave it.

No customer data used to train AI models

Anthropic has committed in their enterprise terms that customer data sent through the API is not used to train Claude. WakeTech.ai does not train its own models on customer data either.

No shared codebase for customer customizations

Customer-specific workflows and extensions live in a dedicated customization layer scoped to that customer deployment, not merged into the shared core that other customers run.

Procurement security reviews typically need more detail.
The packet is ready under NDA.

Exact version inventories, CVE response policy, penetration test reports, SOC 2 posture, dependency tree, deployment runbooks, and disaster recovery documentation. Questions about any component on this page go directly to the person who built it.