Back to all portals
Example reference deployment · In production today

The Partner Portal — so partners stop emailing your team for data.

A self-service portal for your partners. The version you see is running in production at a reference customer.

01 / Live Mockup
Live mockup

See the Partner Portal in action.

A self-service portal for your partners. The version below is running today at an anonymised reference deployment.

02 / Two Models, One Portal
The defining feature

Two business models. One portal.

The portal automatically presents the right reports, eligibility logic, and metrics for each partnership type. A single MSSP (Managed Security Service Provider) partner serving customers across multiple regions can switch between partnerships from a dropdown without logging out.

MSSP model

Tracks: peak product usage per customer.

  • Billing cycle: 26th of previous month → 25th of current month
  • Peak usage per product, monthly summaries
  • 3 / 6 / 12-month trend charts
  • Excel export shaped for the MSSP billing model

Reseller model

Tracks: active orders, ACV (Annual Contract Value), renewals.

  • Billing cycle: calendar month (1st → last)
  • ACV total across portfolio with trend
  • Renewal forecast: 30 / 60 / 90 days
  • Per-customer ACV growth and status distribution
03 / Two Modes
Two modes

One portal. Two faces.

Partner mode

The full MSSP/Reseller portal with every feature enabled. Used by partner administrators and operations staff.

Demo mode

Realistic simulated data for sales conversations — no real customer data ever exposed. A discreet “Demo” pill makes it visually unmistakable.

04 / The Six Pillars
The six pillars

Everything they used to email your team for — self-service.

Customer Dashboard

Portfolio totals up top — customers, active count, ACV, renewals. Customer table grouped into three colour-banded sections so partners see commercial vs product-level signals at a glance.

Customer Detail (tab-based)

Each customer opens in its own tab so partners can keep several open and switch without losing context. Six sub-tabs per customer covering tasks, commercial, product usage, activity, retention signals, and contacts.

Partnership-aware Report

One Report page that adapts to the partnership type — MSSP gets billing-cycle peak charts and invoice-ready Excel; Reseller gets calendar-month ACV trends and renewals. Multi-portal partners switch between them from a dropdown.

Roles, restrictions, notifications

Four user roles, customer-level lock-down enforced across every surface (dashboard, reports, API (Application Programming Interface), notifications), and per-user notification preferences (immediate / daily / weekly).

Modern API for automation

Scoped, secure, rate-limited API so partners can pull data into their own billing and dashboards without emailing your team. Token auth, per-partner scope, IP restrictions.

Self-service partner essentials

Three pages — Kit (sales collateral library), Resources (quick-action shortcuts for the workflows partners hit most), Support (every help channel in one grid). Categories configured during the build.

05 / Behind the Screen
Behind the screen

A scheduled engine, an interactive frontend, integration write-back, and a separate-process API. Each layer scales independently.

The Partner Portal isn’t just a UI on top of your data. The same architectural pattern that powers the Processor and the CSM Portal applies here: a scheduled background engine generates tasks and digest emails on a cron schedule; an interactive frontend serves the dashboard and reports with sub-second response times; integration write-back keeps your CRM (Customer Relationship Management) and subscription system in sync; and a separate-process external API runs on its own port with its own scope-based auth.

Scheduled task engine + email digests

  • Daily and weekly cron jobs (06:00 UTC default) running as a separate Node process
  • Same five-category rule engine as the CSM Portal — renewal upcoming, inactive scanners, failed scans by product, high or inactive product usage, commercial signals
  • Outlook-compatible HTML digest emails with AES-GCM (Advanced Encryption Standard, Galois/Counter Mode) encrypted deep-link tokens — click lands the recipient on the right customer with no leaked context
  • Per-user customer scope honoured (restricted users only see their assigned customers in the digest)

Security architecture

  • Memory-only session state — nothing sensitive in localStorage or sessionStorage
  • Browser-fingerprint-bound sessions, validated on every API call
  • AES-256-GCM authenticated encryption for password storage with portal-type-specific keys
  • Out-of-band password delivery (24-hour TTL (Time To Live), split passphrase delivered separately)
  • Portal type derived from session document on every request — never from a header (prevents header-spoofing)
  • 2FA (Two-Factor Authentication) via TOTP (Time-based One-Time Password), account lockout with stage-based ladder, anti-clickjacking, strict CSP (Content Security Policy)
06 / Configuration
What your version will be configured for

The architecture is delivered. The configuration is yours.

The reference deployment is configured for one specific reference customer’s products and partner relationships. Your version is configured for your products, your partner models, your billing cycles, and your branding.

Configuration scope

What’s configured for your business: your channel models · your billing cycles · your branding and exports · your role definitions · your CRM and product backend integrations. The Assessment identifies exactly what your channel relationships need.

See the Partner Portal running live.

The 30-minute discovery call includes a live walkthrough of the Partner Portal at an anonymised reference deployment — with a confidentiality agreement before any specifics are shared.

Book a 30-minute call