FullStack for multitenant web

What you'll build A versioned read API over the warehouse serving layer. Contract-first: starts against mocks, migrates to real data without a rewrite. ~19 principal screens and ~25 supporting surfaces in React + Tailwind, against mockups and a design system that already exist. Genuinely dense charting: geographic heatmap by state and ZIP-3, per-device lifecycle timelines, drill-downs on every dashboard. This is half the front-end work, not a detail. Real multi-tenancy. Each brand sees only its own data. Isolation is enforced at the data layer; the API is the second line of defense, not the first. An automated suite proves non-leakage on every deployment. AWS Cognito auth with mandatory MFA on privileged roles, including the full surface: invitations, accept-invite, first login, password reset, active sessions, recovery codes. Append-only audit log with on-demand hash-chain integrity verification. Five pre-built compliance exports, schedulable and email-deliverable, plus an alert engine and digest scheduler on the same infrastructure. The deployment itself: mandatory IaC, CI/CD with test gates, strict dev/staging/prod separation, observability. This software will be read during a regulatory inspection. Six-year demonstrable retention, per-unit chain of custody, and documentation and tests that are project deliverables rather than byproducts.