I build procurement & operations software that GCC hotels run in production.
I'm Shajjad Khan, founder and systems architect behind TawreedFlow — a live, multi-tenant procurement platform built for hospitality teams across the GCC. I help operations and finance leaders replace WhatsApp-and-spreadsheet workflows with auditable systems built for daily use.
TawreedFlow توريد
The modern multi-tenant procurement and supply chain SaaS purpose-built for luxury hotels and enterprise hospitality across the GCC (Saudi Arabia, UAE, Qatar).
TawreedFlow Enterprise
The Industry Challenge
Hospitality properties in the GCC process millions in monthly food, beverage, engineering, and operational requisitions. Traditional operations relied on chaotic, un-audited WhatsApp chats and fragmented spreadsheets, resulting in lost quotes, procurement leakage, and lack of compliance with financial controls.
The Architectural Solution
TawreedFlow creates a single source of truth across the entire procurement lifecycle. Requisitions flow seamlessly through Department Heads, Purchasing Coordinators, and Financial Directors. Automated RFQs dispatch directly to vetted suppliers, enabling instant quotation comparison with item substitute flags and purchase order delivery verification.
Enterprise Role-Based Access
Engineered with strict tenant isolation supporting multi-property hotel chains: Master Admins, Directors, Purchasing Receivers, Department Heads, and external Supplier Portals (Owners, Admins, Field Drivers).
"Designed, directed, tested, and shipped end-to-end by founder Shajjad Khan — from workflow discovery to production rollout across GCC hotels."
Selected Systems & Platforms
A collection of production platforms, practical tools, and workflow systems built from real operational pain points.
BlockTree Editorial Matrix
A spatial newsletter and branching discourse platform featuring a 2D canvas navigation matrix, 360° virtual joystick physics, verified author registration, and a rich typography studio with live side-by-side Markdown preview.
- Dynamic 2D radial collision physics preventing sibling overlap.
- Multi-tier security: Pre-driver regex SQLi filters, PBKDF2 dummy hashing, and RFC 6238 TOTP 2FA.
- Real-time spatial keyword search and content moderation suite.
FastTrack Tools Suite (50+ Utilities)
A standalone high-velocity utility platform engineered for 100% client-side data privacy. Allows users to process PDFs, compress images, calculate business margins, inspect AutoCAD DWG/DXF blueprints, and audit SEO sitemaps directly in-browser with zero server lag.
- 100% client-side privacy: Files never leave user RAM; zero third-party cloud storage exposure.
- Comprehensive catalog: DWG/CAD viewer, high-accuracy PDF editor & annotator, PDF merge/split, WebP/PNG conversions, QR generation, and XML sitemap inspection.
- Independent architecture: Hosted on dedicated service infrastructure with ad-monetized sustainability.
ISP Telecom Billing & MikroTik Automation
High-throughput subscriber management, automated bandwidth provisioning, and radius accounting platform built for regional internet service providers.
- Real-time RouterOS API automation for dynamic queue shaping and user disconnects.
- Automated WhatsApp payment reminders and automated gateway invoice dispatch.
- Captive portal hotspot redirects for overdue payment resolution.
GenieACS TR-069 Fleet Management
Carrier-grade auto-configuration server (ACS) orchestrating remote provisioning, firmware upgrades, and real-time monitoring across subscriber CPE routers and GPON ONUs.
- Zero-touch provisioning profiles triggered upon customer fiber activation.
- Real-time Wi-Fi diagnostics, signal power analysis, and fault detection.
- Automated mass firmware patch deployment with safety rollback thresholds.
Enterprise HR & Automated Payroll System
End-to-end human resource management suite providing multi-branch employee records, biometric attendance synchronization, multi-tier leave approval hierarchies, and automated payroll pay slip calculation.
- Automated salary computation factoring overtime, deductions, and tax compliance.
- Biometric clock-in data ingestion with shift scheduling algorithms.
- Role-based self-service employee portal and departmental audit logging.
How I Build: Product Judgment, AI Leverage, Production Discipline
I start with the operational problem, design the workflow with the people who will use it, and stay accountable through rollout. AI accelerates the implementation; architecture, product decisions, and production testing remain hands-on. Nothing ships until it works in the real world.
Business Context First
Every architectural decision connects directly to operational efficiency, user satisfaction, and tangible ROI.
AI-Accelerated Delivery
AI speeds up implementation without replacing judgment. I define the behavior, review the architecture, test edge cases, and keep iterating until the system holds up under real operational load.
Full-Lifecycle Ownership
From listening to end users on hotel floors and network operations centers to shaping data, screens, automations, deployments, and support flows.
Shajjad Khan
Founder & Systems Architect
GCC & Global
Specializing in Enterprise B2B SaaS, High-Throughput Network Automation, and Mission-Critical Web Applications.
Core Competencies & Technologies
The tools, platforms, and workflows I use to turn ideas into working production systems.
Backend & Languages
- Python (Django 6, Flask, FastAPI)
- JavaScript / TypeScript (Node.js, ES6+)
- SQL (PostgreSQL, MySQL, SQLite WAL)
- PHP & Bash/Shell Scripting
- REST APIs & WebSockets
Infrastructure & DevOps
- Linux System Administration (Debian/Ubuntu)
- Nginx Reverse Proxy & SSL
- Systemd Services & Process Management
- Celery & Redis Background Workers
- Docker & Git CI/CD Workflows
Telecom & Networking
- MikroTik RouterOS API Automation
- FreeRADIUS & AAA Accounting
- GenieACS CWMP (TR-069) Device Fleet
- Tailscale Mesh & WireGuard VPN
- Bandwidth Shaper Queues & Hotspots
Security & Architecture
- Pre-Driver Regex SQLi Shields
- Timing Defense (PBKDF2 Dummy Equalizers)
- RFC 6238 TOTP 2FA Multi-Factor Auth
- Honeypot Bot Traps & Rate Limiting
- Multi-Tenant Schema & Data Isolation
Ways We Can Work Together
Clear, transparent engagement models designed for operations leaders, hospitality executives, and technical founders.
Turnkey Platform Build
Full-lifecycle engineering from initial workflow discovery to production deployment across your properties or client base.
- Operational workflow mapping & database schema design
- Multi-tier approval hierarchies & state machines
- ZATCA Phase 2 / WhatsApp Cloud API integrations
- Sovereign deployment on GCC Linux cloud or on-premise
- 30-day post-launch warranty & operational training
Architecture & Discovery Sprint
High-intensity diagnostic sprint to audit existing bottlenecks, unblock technical debt, or map complex procurement logic.
- Deep audit of database queries, concurrency & bottlenecks
- ZATCA Phase 2 & PDPL data residency readiness review
- Complete architectural blueprint & schema specification
- Build vs. buy evaluation & milestone execution plan
Fractional Systems Architect
Principal-level architectural governance, infrastructure hardening, and technical guidance on a dedicated monthly retainer.
- Direct Slack/Teams engineering advisory channel
- Weekly architecture reviews, PR audits & schema advice
- Incident escalation, backup verification & uptime defense
- Technical vendor vetting & senior engineering hiring review
Engineered for GCC Operational & Compliance Standards
Every system is constructed under zero-trust principles to safeguard enterprise data assets and meet regional mandates.
Strict RBAC & Tenant Isolation
Role-based access hierarchies (Requester, Dept Head, Finance, GM) with row-level data segregation preventing cross-property leakage.
Cryptographic Audit Trails
Every PO generation, quote approval, and status change is immutably timestamped with user ID, IP address, and state history.
Saudi PDPL Sovereign Residency
Engineered for deployment within Kingdom cloud regions (Riyadh/Jeddah) or on-premise Linux clusters compliant with SDAIA and CST.
ZATCA Phase 2 E-Invoicing
Compliant cryptographic UBL 2.1 XML generation, invoice hash chains, ECDSA signatures, and automated clearance webhooks.
Enterprise FAQ
Direct answers regarding confidentiality, IP ownership, data residency, and collaboration workflows.
Do you execute mutual NDAs before reviewing proprietary workflows?
Yes, absolutely. Prior to reviewing internal procurement flows, supplier pricing, or existing architecture, we execute a standard bilateral Non-Disclosure Agreement. Your operational trade secrets, vendor matrices, and strategic data remain strictly confidential.
Can our applications and databases remain hosted strictly within Saudi Arabia?
Yes. All platforms are engineered for sovereign deployment on certified regional infrastructure (such as local Saudi cloud providers in Riyadh/Jeddah or client on-premise Debian/Ubuntu Linux servers) in full compliance with SDAIA's Personal Data Protection Law (PDPL) and CST data localization mandates.
Who owns the intellectual property and source code upon completion?
You own 100% of the custom application source code, schemas, and intellectual property upon final delivery and settlement. There are no recurring proprietary software licensing fees from me, no vendor lock-in, and full technical handover documentation is included.
Can custom builds integrate with existing ERPs, Oracle Opera, or ZATCA?
Yes. We engineer compliant ZATCA Phase 2 cryptographic e-invoicing pipelines (generating signed UBL 2.1 XML and Phase 2 clearance webhooks), alongside REST, GraphQL, or database sync pipelines for systems like SAP, Oracle Opera, or custom legacy software.
What working hours do you keep, and how do we communicate during a build?
I operate on Arabia Standard Time (AST / UTC+3), based in Riyadh. For active engagements, communication is conducted via dedicated Slack or Microsoft Teams channels with daily asynchronous updates, weekly milestone demos, and direct WhatsApp escalation for urgent operational alerts.
What support is provided after the system goes live in production?
Every turnkey delivery includes a complimentary 30-day production warranty covering bug fixes, minor parameter adjustments, and operational stabilization. Beyond the warranty, ongoing coverage is available via a fractional advisory retainer or an SLA-backed maintenance agreement.
GCC Hotel Procurement & Operations Automation Blueprint
Evaluating software to streamline purchase orders, eliminate WhatsApp leakage, and prepare for ZATCA Phase 2 compliance? Explore our interactive tools and implementation case studies:
Let's Discuss Your Next High-Impact Initiative
Whether you're looking to architect a scalable B2B SaaS platform, automate complex operations, or evaluate strategic technical advisory, I'd welcome the conversation.
Schedule a 20-minute introductory architecture call directly.