Technologies We Use

Our Technology Stack

At Convia, we choose technology to serve outcomes: faster delivery, lower total cost, and reliable scale. Below is our curated stack—grouped by capability—with notes on when and why we use each tool.

Our Engineering Principles

Outcome Over Hype: Our Core Engineering Principles

Outcome over hype

Tools must improve time-to-value, quality, or cost—prefer proven tech with a roadmap.

Secure by default

OWASP, least privilege, encrypted at rest/in transit, dependency scanning.

Observable systems

Logs, metrics, traces, and clear SLOs from day one.

Composability

API-first, modular design, and infrastructure as code for repeatability.

Accessibility & performance

WCAG 2.1 AA targets and measurable performance budgets.

Technology Stack

Our Comprehensive Tech Arsenal

Frontend (Web & Portals)

Frameworks: React (Next.js), Vue (Nuxt) for SSR/SSG, Remix for data-driven UX.

UI & Styling

Tailwind CSS, Radix UI/shadcn, Material UI; design tokens for brand consistency.

State & Data

React Query/RTK Query, SWR; GraphQL (Apollo) or REST (OpenAPI).

Why this stack

Fast initial loads (SSR/SSG), strong ecosystem, easy A/B testing and analytics.

Use when: Marketing sites, dashboards, complex portals needing SEO, speed, and scale.

Mobile Apps

Native: Swift/SwiftUI (iOS), Kotlin/Jetpack Compose (Android) for maximum performance and device APIs.

Cross-Platform

Flutter or React Native for one codebase across iOS and Android.

Services

Firebase (auth, push, analytics), RevenueCat (subscriptions), OneSignal (notifications).

Why this stack

Balance of speed, quality, and maintainability with strong CI/CD and test support.

Use when: Consumer apps, field/enterprise apps, subscription products.

Games & Real-Time Experiences

Engines: Unity (2D/3D/cross-platform), Unreal Engine (high-fidelity 3D), Godot (lightweight 2D).

Backends

PlayFab/Photon/Colyseus; custom Node/Go for leaderboards, matchmaking, telemetry.

Content Pipeline

Blender, Substance, Spine; addressable assets and remote configs.

Why this stack

Mature tools, multi-platform export, robust live-ops support.

Use when: Casual/hyper-casual, mid-core 3D, multiplayer, metaverse activations.

Backend & APIs

Languages/Frameworks: Node.js (NestJS), Python (FastAPI), Go (performance microservices), Java (Spring).

API Styles

REST (OpenAPI) and GraphQL (Apollo/Federation); gRPC for low-latency services.

Auth & Access

OAuth2/OIDC, JWT/opaque tokens, Keycloak/Cognito, fine-grained RBAC/ABAC.

Why this stack

Predictable performance, strong libraries, cloud-native patterns.

Use when: Multi-service products, integrations, high-throughput APIs.

Data, Storage & Search

Relational: PostgreSQL (primary), MySQL (legacy/interoperability).

Caching & Queues

Redis, RabbitMQ/Kafka for events and streaming.

Analytics & Warehousing

BigQuery, Snowflake; dbt for transformations.

Search & Vectors

Elasticsearch/OpenSearch; Pinecone/Weaviate/FAISS for vector search.

Use when: Reporting, recommendations, RAG, near-real-time insights.

Artificial Intelligence & Agents

Model Providers: OpenAI, Anthropic, Cohere; on-prem/local LLMs for sensitive data.

Frameworks

LangChain, LlamaIndex for tool-use/RAG; Hugging Face for classic NLP/CV.

Serving & Ops

Triton/ONNX Runtime, Ray; vector DBs, evaluation harnesses and guardrails.

Why this stack

Fast prototyping, measurable quality, portable deployments.

Use when: Generative content, search over private data, workflow automation, AI agents.

Blockchain & Web3

Chains: Ethereum, Polygon, Arbitrum, Solana (use-case driven).

Smart Contracts

Solidity, OpenZeppelin, Hardhat/Foundry; audits and testnets as standard.

dApps & Wallets

Next.js frontends, wagmi/ethers.js, WalletConnect/MetaMask, custody options.

Why this stack

Security, liquidity, developer tooling, and user experience maturity.

Use when: NFTs/memberships, tokenized assets, marketplaces, on-chain identity.

E-commerce & CMS

Commerce Platforms: Shopify/Shopify Plus, WooCommerce, Medusa (headless).

CMS

Headless CMS (Contentful/Strapi), Sanity; image CDNs.

Payments & Ops

Stripe, Adyen, PayPal; Shippo, TaxJar, Klaviyo.

Why this stack

High conversion templates, fast pages, flexible content, global readiness.

Use when: D2C stores, B2B portals, multi-region catalogs, custom checkout flows.

Cloud & DevOps

Clouds: AWS, GCP, Azure (client preference and regional needs).

Containers & Orchestration

Docker, Kubernetes, Helm; serverless (Lambda/Cloud Functions).

IaC & CI/CD

Terraform/Pulumi, GitHub Actions, ArgoCD; blue-green/canary releases.

Observability

OpenTelemetry, Prometheus/Grafana, ELK; incident runbooks and SLOs.

Use when: High uptime requirements, regulated workloads, rapid scaling.
Quality Engineering

Built-in Quality & Security

Security & Compliance

  • OWASP ASVS/MASVS, CIS Benchmarks
  • TLS 1.2+, KMS-managed keys
  • SAST/DAST/Dependency scans
  • GDPR/CCPA compliance patterns

Testing Pyramid

  • Unit → integration → end-to-end
  • Playwright/Cypress with mocks
  • k6/Gatling load tests
  • Chaos drills & disaster recovery

Accessibility & Performance

  • WCAG 2.1 AA targets
  • Performance budgets in CI
  • Image/code splitting
  • CDN edge caching
Development Process

How We Choose a Stack

Speed to market

Pick the fastest path that meets security and scale (e.g., Next.js + headless CMS + Stripe).

Native needs

Heavy device features → native iOS/Android; broad coverage → Flutter/RN.

Data gravity

Real-time streams → Kafka + ClickHouse; reporting/BI → warehouse + dbt.

Regulatory/security

Private deployments, key custody, on-prem models where required.

Third-Party & Integration Readiness

CRM/Marketing

HubSpot, Salesforce, Marketo, Segment

Payments/Identity

Stripe/Adyen, Apple/Google Pay, Auth0/Keycloak

Communications

Twilio/SendGrid/WhatsApp Business; push notifications across platforms

Maintenance & Handover

Documentation

Architecture diagrams, runbooks, API contracts, decision records (ADRs)

Operations

SRE checklists, on-call rotations, RPO/RTO targets, cost dashboards

Handover

Admin access, playbooks, and workshops so your team can own day-2 operations