Sourcing Vietnam Logo

Sourcing.vn B2B Sourcing Platform

How we built Sourcing.VN, a secure B2B platform connecting global buyers with Vietnamese manufacturers, utilizing simplified role boundaries and a unified automation workspace.

01

The Operational Jargon & Strategy

Establishing trusted, secure connections between international retail brands and local manufacturing factories in Vietnam requires a robust user permission matrix. Sourcing.VN must support diverse user personas—including corporate buyers, factory managers, and independent sourcing agents.

The main operational challenge lay in presenting distinct, tailored dashboards and communication hubs for each user role while ensuring complete confidentiality of proprietary design files and RFQ details—all without introducing massive infrastructure overhead or slow development loops.

02

Decoupled Architecture & Implementation

We designed a multi-tenant workspace architecture. The platform runs a client-facing web gateway that serves secure endpoints and portals, alongside a back-of-house workflow runner that automates backend loops.

To ensure maximum security and privacy, authentication is completely decoupled from internal data flows, and all private configuration keys are encrypted directly using offline secure vaults. This design allows the product team to introduce new supplier validation steps or change automated email challenges without touching user-facing interfaces, ensuring zero downtime and quick releases.

Key Platform Highlights

Secure
Configuration
Plaintext configurations are completely replaced by encrypted vaults.
< 60ms
Ingress Speed
Hono routing provides sub-millisecond dispatch for all requests.
Sandboxed
Workflows
Node-RED is completely sandboxed, relying on Hono validation headers.
Fast
Local Data
SQLite databases run locally for maximum velocity.

Operational Maintenance & Growth

1

Tailored Role Workspaces

Buyers, suppliers, and inspectors log into customized portals that present only the tools and data relevant to their operational workflow.

2

Modular Workflow Integration

Automated routines (such as quote routing and notification dispatches) are built as sandboxed workflows, keeping back-of-house logic separated from client pages.

3

Zero-Exposure Credentials

All secrets and keys are kept in encrypted vaults, meaning the codebase contains no plaintext credentials and reduces developer access risks.

4

Unified Supplier Indexing

SQLite handles fast regional supplier statistics and category mappings, letting managers query statistics without database synchronization lags.

Secure Gateway & Decoupled Architecture

Role Boundaries & Sandbox
Client Workspaces Global Buyer Portal Manufacturer Portal Unified HTTP / HTMX API Port 10k Hono Ingress Proxy Better Auth OTP Checks dotenv-vault AES Keys Local SQLite Storage Secure Headers Workflow Sandbox Node-RED Flow Studio Automated RFQ Loops Port 11002 Isolation
Why Does It Matter? (CxO Perspective)

Eliminating the Enterprise Tech Tax

Standard enterprise wisdom claims that launching a secure, multi-tenant B2B marketplace requires separate front-end teams, back-end teams, dedicated DevOps engineers, and complex cloud resources. This results in heavy architectural drag, high coordination costs, and slow feature rollouts.

Sourcing.VN proves that by using a **clean, focused codebase** combined with **automated workflow runners**, a **single full-stack developer in 2026** can build, deploy, and maintain an entire enterprise-grade platform.

By proxying background logic safely and using local encrypted configuration vaults, you gain maximum security boundaries and instant deployment cycles with near-zero ongoing server maintenance cost.

Technical Specification
Architecture Type Gateway & Decoupled Workflow Monolith
Gateway Server Hono Web Server (Node.js/Bun runtimes)
Workflow Engine Node-RED (Proxy-wrapped, secure context-injected headers)
Auth & Profile Flows Better Auth (OTP email verification loops)
Secrets Management dotenv-vault (AES-256-GCM encrypted vault configuration)
Database Layer SQLite (Local file-backed databases)
API & Interface Routing HTMX (HTML-over-the-wire interactive views) & JSON REST endpoints
Tenant Workspace Ports Sourcing Portal (Port 10000), Events Portal (Port 11002)

Explore Sourcing.vn

Explore the live B2B platform and see how high-security, low-overhead architectures power trade networks.

Visit sourcing.vn