GeoTax — SaaS platform for tax accounting automation in Georgia
Client: RMS Digital Services (in-house)
Website: https://geotax.biz/
About the project
GeoTax is a full-fledged SaaS platform for individual entrepreneurs and small businesses in Georgia, automating the entire financial accounting cycle: from registration and invoicing to generating tax reports and interacting with technical support. The system is designed with a focus on financial data security and compliance with the requirements of the Revenue Service of Georgia (RS.ge).
Task
- Create a comprehensive solution for entrepreneurs in Georgia that:
- Automates income, expense, and tax calculation
- Provides secure storage of sensitive financial data
- Provides tools for invoicing and working with counterparties
- Integrates with popular communication channels (Telegram, email, online chat)
- Complies with Georgian tax legislation requirements
- Scales as the user base grows
Solution
A microservice platform with clear separation of responsibilities has been developed. The architecture follows Clean Architecture principles, ensuring business logic independence from infrastructure and simplifying scaling of individual components.
System Architecture
Frontend (Client Application)
Modern SPA based on Next.js with TypeScript and Tailwind CSS. The interface is built on the Shadcn UI component library with Framer Motion animations for a premium user experience. Dark and light themes are supported, with full localization in three languages (EN/RU/KA) via next-intl. State management and API synchronization are implemented using React Query, form validation via Zod.
Backend API
High-performance REST API in Go with the Gin framework. The structure follows Clean Architecture with separation into layers: presentation (HTTP handlers), application (use cases), domain (business entities), infrastructure (external integrations). Authentication via JWT, support for two-factor authentication.
Background Worker
A separate service for executing resource-intensive asynchronous tasks:
- Generating PDF invoices and financial reports
- Sending notifications (email, Telegram)
- Creating database backups
- Managing task queues via Redis
Data Storage
- PostgreSQL — the main relational database for financial transactions and business entities
- Redis — caching, session storage, and task queue management
- HashiCorp Vault — centralized management of secrets and encryption keys
Key Features
Security and Authorization
- Multi-level registration with tax regime selection
- Two-factor authentication (OTP via email)
- Password recovery system
- Personal data protection according to security standards
Financial Accounting
- Income: transaction recording, linking to clients, automatic currency conversion
- Expenses: categorization of spending, receipt upload, category analytics
- Analytics: profit charts, tax forecasts, tracking limits for small businesses (up to 500,000 GEL)
- Tax compliance: automatic tracking of VAT thresholds and Small Business Status
Document Management
- Invoicing: creating professional PDF invoices with customizable templates
- Clients: counterparty database with interaction history
- Tax reports: automatic data preparation for filing declarations with RS.ge
Support and Communication
- Online chat: integration with Chatwoot with SSO authentication. Users only get access to their own tickets, conversation history is synchronized across devices
- Telegram Bot: personalized bot for receiving notifications about transactions, invoice status changes, and critical security events
- Email notifications: automatic alerts about important system events
💳 Payment System
- Integration with PayPal for managing subscriptions and accepting payments for premium features
Technology Stack
| Layer | Technologies |
| Frontend | Next.js, TypeScript, Tailwind CSS, Shadcn UI, React Query, Zod |
| Backend | Go, Gin, Clean Architecture |
| Database | PostgreSQL, Redis |
| Infrastructure | Docker, Docker Compose, Nginx |
| Security | HashiCorp Vault, JWT, AES-256, 2FA |
| Communication | Chatwoot API, SMTP, Telegram Bot API |
| Payments | PayPal SDK |
| Background Jobs | Redis Queues, Worker Pattern |
Security and Fault Tolerance
Security is the architectural foundation of the project, not an add-on.
Data Encryption
All sensitive data (personal information, financial details) is encrypted using envelope encryption. Encryption keys are stored in a specialized secret store; the application works only with encrypted data.
Immutable Audit
All critical actions in the system are recorded in an audit log with cryptographic protection. Each record is protected by a hash using a secret key, making it impossible to unnoticeably modify or delete logs.
Data Isolation
Strict access control at the API level ensures that each user has access only to their own data — from financial records to support chat conversations.
Backup
Automated system for creating database snapshots with secure transfer to cloud storage. Support for local caching and automatic file rotation.
Integrity Monitoring
Built-in services monitor data integrity and automatically clear old logs and temporary files according to storage policies.
Queue Monitoring
Interface for monitoring and managing background tasks in real-time, tracking execution, managing retries, and analyzing performance.
Result
A production-ready SaaS platform has been created that:
- Automates the full cycle of financial accounting — from transaction registration to tax reports
- Ensures data security — encryption, isolation, cryptographic audit
- Complies with RS.ge requirements — automatic currency conversion, limit tracking
- Provides multi-channel support — chat, Telegram, email
- Scales — microservice architecture with asynchronous task processing
- Offers premium UX — modern interface with three-language support and dark theme
Conclusions
GeoTax is an example of a comprehensive SaaS project where security and compliance are architectural principles, not features. The project demonstrates deep expertise in:
Full-stack development — from high-performance Go API to modern Next.js frontend
Microservice architecture — separation of responsibilities, asynchronous processing, task queues
Financial data security — encryption, isolation, cryptographic audit, secret management
Integrations — payment systems, messengers, email, cloud storage
DevOps practices — containerization, backup automation, monitoring
This is not just a CRUD application — it is a production-ready platform designed to work with sensitive financial data in a regulated jurisdiction.
Technical Stack
- Go
- Next.js
- PostgreSQL
- Redis
- Docker
- HashiCorp Vault