Codeaza Technologies
Prepared for Cashpoints · Commercial in confidence

Cashpoints Analytics production readiness

The dashboard is live, fast and working as intended. This is the short, fixed-price piece of work that gets it formally signed off for production: secured, backed up, monitored and sized. One Codeaza engineer, two weeks.
Proposal no.
CDZ-2026-0930
Issued
30 September 2026
Timeframe
2 weeks · 10 working days
Fixed price
NZD $1,750
Prepared for
Cashpoints
New Zealand
Re: analytics.cashpoints.co.nz production sign off
Prepared by
Muhammad Asim, Founder & CEO
Codeaza Technologies, Islamabad, Pakistan
muhammadasim@codeaza.org · codeaza.com
All amounts in NZD
01The offer

We reviewed the live site and the application. It responds in about a second, reporting data is correctly protected behind sign in, the nightly data run is clean and all 69 tests pass. No changes were made to production during the review.

A handful of gaps stand between it and a formal sign off. We will close them in ten working days for a fixed NZD $1,750, and prove every safeguard works before we hand over.

02What we found
Check
Result
Fixed by
Cache administration controlsCan be viewed and triggered without signing in
Fail
A1
Public sign upStill open on the live site, though not needed
Fail
A2
Third party componentsSecurity updates for 8 website and 17 application components
Attention
A3
Browser security protectionsStandard protective settings not enabled
Attention
A4
Automated checks on pull requestsTests and build do not run before merge
Not in place
B1
Server backup and uptime monitoringNo off site server backup or independent uptime check
Not in place
D3, E2

Passed: availability and secure connection, data protected by sign in, tests and build, staging and code review, nightly data preparation.

03The work
A–B
Days 1 to 3

Security and release process

Close the access gaps, patch components and make every release gated and reversible.

  • A1 Cache admin and data refresh limited to signed in administrators
  • A2 Public sign up off, existing accounts reviewed
  • A3 Vulnerable components updated, every page and report retested on staging
  • A4 Browser protections on, permission checks refuse on error
  • A5 Passwords and keys rotated into Coolify secure settings
  • B1 Tests and build required on every pull request, alongside the Claude review
  • B2 Post release check and a rehearsed rollback
  • B3 Staging confirmed on its own Snowflake access
D
Days 4 to 5

Backups and recovery

Protect against losing the single server or its private network link.

  • D1 Daily backups and point in time recovery confirmed, retention agreed
  • D2 Independent encrypted nightly copy stored off site
  • D3 Coolify configuration and secure settings backed up off site
  • D4 Restore tested into a temporary database, rebuild plan written (incl. Tailscale)
E
Days 6 to 7

Monitoring and alerts

Outages and failed jobs reported in Slack, not discovered by users.

  • E1 Sentry alerts for error spikes, slow pages and failed or missed nightly jobs
  • E2 Independent uptime monitoring from outside the server
  • E3 Coolify alerts for failed releases, stopped services and low disk
  • E4 Alert if the Tailscale database link drops; health check covers database and Snowflake
C
Days 8 to 10

Capacity and sign off

Size the server on evidence, then retest and hand over.

  • C1 Load test on staging to find how many users the server supports
  • C2 Several application workers so the server is fully used
  • C3 Nightly and routine jobs moved to Coolify scheduled tasks, run exactly once
  • Final retest on the live site, documentation and sign off
04What it costs
Stage
Effort
Price
Production reviewLive site test, application review, vulnerability scan, this work order
Done
Included
Security and release processA1 to A5, B1 to B3
3.75 days
NZD $650
Backups, recovery and alertsD1 to D4, E1 to E4
3.5 days
NZD $600
Capacity and sign offC1 to C3, final checks and documentation
2.75 days
NZD $500
Total, fixed price
10 days
NZD $1,750
Fixed price
NZD $1,750
no surprises, no hourly overrun
Timeframe
2 weeks
one engineer, start to sign off
Included free
Production review
already delivered

Invoiced 50% on start and 50% on sign off, on 14-day terms. Server upgrades (Adams) and Snowflake usage are billed by those providers and are not included.

05What we need from you
Confirmed in week one
Cashpoints: staging Snowflake access (B3), compute size and credit limit (C5), data retention (D5), credit alerts (E5)
Adams: upgrade path (C4), config backup (D3), restore and rebuild (D4), Tailscale alerting (E4)
Decisions
Backup retention and acceptable time to restore after a serious incident
Expected users and peak times, to guide the load test
Budget for a server upgrade if the load test shows it is needed
Slack channel and contacts for production alerts
06Done means

Secure. All critical and high priority items complete and retested on the live site.

Gated. Automated checks pass on every pull request before merge.

Recoverable. A restore test and a rollback completed successfully.

Watched. A test alert received in Slack from each monitoring source.

This price. Held for 10 working days.

Confidentiality. Everything shared between us stays confidential.

Approval

Sign below to approve the work order and we will schedule the start date.
Approved by, Cashpoints
Signature
Date
© 2026 Codeaza Technologies · proposal prepared for Cashpoints. Commercial in confidence. · Proposal CDZ-2026-0930 · Muhammad Asim, muhammadasim@codeaza.org