Home  /  Technology

One system, from the drum to the table

The portal a partner orders in, the registry that certifies a lot and the page a guest reaches by scanning are not three products talking to each other. They are one system with three doors, which is the only way the numbers on a guest’s screen can be guaranteed to match the batch record.

The shape of it

Databases
One
Ways in
Three
Public surface auth
None
Built API
First

How it fits together

Three doors, one record

The public door is separate code with a narrower payload — not the trade-facing lookup with its checks relaxed. That distinction is the whole security design.

Partners & venues signed in · scoped to their own org Coremin staff approvals · certification · recall A guest with a bottle anonymous · no account Partner portal orders · stock · invoices profile · offers · team session auth · per-permission Partner app API the same operations, on a phone token auth · per-permission Public scan surface one lot · one venue offers · education no auth · rate-limited by address The payload boundary no volumes · no buyers · no prices · no other lot One database · one batch registry · one set of approved claims concentrate lots · formulations · production runs · batches · certificates · orders · offers the scan reads the same row the certificate was printed from
Three doors onto one record. The public door is narrower code, not the trade lookup with its checks turned off — and the narrowing is enforced on the way out, so a bug in a client cannot widen it.

For partners and venues

The portal you already order in is where you manage everything else

No second login, no separate marketing tool. A venue that buys bottles in the portal manages its public profile and its offers in the same place.

Ordering

  • ✓Browse what your territory can supply
  • ✓Request a quote, convert it to an order
  • ✓Track production and dispatch
  • ✓Invoices and payment history

Your brand

  • ✓Register a brand and get it approved
  • ✓See the formulation and its version
  • ✓Download the certificate for any lot
  • ✓Trace a lot back to its concentrate

Your venue page

  • ✓Profile, description and photographs
  • ✓Menu and gallery
  • ✓Opening hours and location
  • ✓Offers, with full version history

Built API first

The app, this website and the scan page are all clients

Every operation is an API call before it is a screen. That is not an architectural flourish — it is what stops the mobile app and the portal drifting apart, and it means a venue’s offer looks the same wherever a guest meets it.

  • One schemaOne database and one set of migrations. No synchronising, so nothing to disagree.
  • One envelopeEvery response has the same shape, so a client handles success and failure once.
  • One permission setManaging offers is its own permission, separate from ordering and from payments.
Camera scan reads the printed URL The browser always, on every phone The app only if installed The web page every other scan installed otherwise
A camera hands the URL to the browser, never straight to an app. Every first-time scanner takes the lower path, which is why the web surface is required rather than optional.

Design constraints we hold ourselves to

A bottle outlives the arrangement that produced it

Bottles sit in fridges for a year and they travel. The screen has to stay truthful long after the commercial relationship has moved on.

Situation What a scan shows
Everything currentProduct, lot, minerals, maker, the venue and its offer
Venue suspendedProduct, lot, minerals, maker. No offer.
Venue no longer a customerProduct, lot, minerals, maker. No profile, no offer.
Brand licence lapsedEverything except a live Powered by COREMIN mark
Past its best-before dateEverything, with the date shown plainly
Lot recalledThe recall notice, first and alone. No offer, no claim, no promotion.
Code not recognisedA plain page saying we cannot identify the bottle — never an error screen

A recall suppresses all marketing. It is the one place where the safety rule and the commercial rule could collide, and they do not: showing a guest a discount on a bottle that has been recalled would be indefensible. Safety wins, without a meeting.

Technology

Want a walkthrough of the portal?

We will show you ordering, a lot certificate, a venue profile and the offer flow on a live system.

Become a partner Talk to us first