Architecture Principles

Engineered for trust.

Mirai is designed for businesses where accuracy matters more than speed. Every architectural decision is oriented around transactional correctness, data isolation, and operational reliability.

Official Channel Integrations

Built on Meta's official WhatsApp Business Platform and additional channels. No unofficial API wrappers, screen scraping, or grey-market integrations.

AI is not the system of record

Business logic and state — loyalty balances, voucher redemptions, bookings — live in a strongly consistent data store. AI orchestrates intent; the system of record holds truth.

Tenant isolation by design

Designed to prevent cross-tenant access at the database level. Each organization's data is scoped and isolated, following the canonical multi-tenant data model.

Idempotent writes

All voucher redemptions, loyalty adjustments, and booking operations use idempotent write paths to prevent duplicate transactions under retry or concurrency scenarios.

Full audit trail

Every state-changing action — loyalty adjustments, voucher issuance, booking mutations — is logged with stable identifiers for traceability.

RBAC with least privilege

Role-based access control is designed to ensure operators, staff, and integrations only access the data and actions they are authorized for.

Scale-ready architecture

Engineered for high concurrency, with a design-day target of 500,000 simultaneous users across tenants. Scale is a first-class architectural concern, not an afterthought.

Deterministic state machines

Customer onboarding and conversation flows are modeled as deterministic state machines with clear transitions, remediation paths, and no ambiguous intermediate states.

Singapore Compliance

Built for Singapore's Regulatory Environment

Singapore businesses need infrastructure that meets local standards. Mirai is designed with PDPA, IMDA, and healthcare compliance in mind.

PDPA-Compliant Data Handling

Tenant isolation ensures patient and customer data never co-mingles. Consent management built into every workflow.

Immutable Audit Trails

Every transaction logged with stable identifiers. Dispute-ready infrastructure for Singapore's regulatory environment.

IMDA CTO-as-a-Service Recognized

Architecture reviewed against IMDA standards. Cloud-native infrastructure with Singapore data residency options.

SOC 2 Type II In Progress

Formal SOC 2 Type II audit scheduled for Q3 2025. Security controls documented and monitored.

For Singapore F&B operators, clinics, and service businesses: your customer data stays yours. Our tenant-isolated architecture means cross-tenant breaches are prevented by design.

Frequently Asked Questions

Is Mirai PDPA compliant?

Yes. Mirai is designed with PDPA compliance as a core requirement. Our tenant-isolated architecture ensures patient and customer data never co-mingles between organizations, and consent management is built into every workflow.

Where is my data stored?

Mirai offers Singapore data residency options. Our cloud-native infrastructure can be configured to store your data within Singapore, meeting local regulatory requirements for data sovereignty.

Can I export my data?

Yes. Mirai supports full data export capabilities. You retain ownership of your customer data and can export it at any time in standard formats for portability or backup purposes.

What happens in a dispute?

Mirai maintains immutable audit trails with stable identifiers for every transaction. This dispute-ready infrastructure provides clear evidence trails for Singapore's regulatory environment, including complete logs of loyalty adjustments, voucher redemptions, and booking mutations.

Design-day targets

These are the architectural targets Mirai is engineered around. They represent the design-day capacity, not marketing claims about current throughput.

500K
Simultaneous user target
Multi-tenant
Isolated data per organization
ACID
Transactional correctness