I'm Sannan Malik, a full-stack engineer. I design, build and run multi-tenant SaaS end to end: product, backend, web, mobile and the production server. One person, no handoffs.
Selected work
Whole platforms, not pages. Each one is designed, built, deployed and operated by me.
OPD, IPD, pharmacy, lab, radiology, billing, HR and finance in one multi-tenant platform. It's built for Saudi regulations (ZATCA e-invoicing, NPHIES insurance, Wasfaty e-prescriptions, Nafath identity) with a full English, Arabic and Urdu interface.
It connects a website and covers every step: crawl and audit, Search Console and GA4 data, competitor and keyword research, strategy, content and publishing. AI agents do the work, and nothing goes live until a person approves it in the command centre.
A Flutter app for delegates, a portal for members and companies, and an admin portal for organisers, all sharing one API and one design system. It handles events, delegations, payments, refunds and networking.
A back-office for brokers in which each broker's domain decides who can sign in. Access is denied by default, sessions are checked against the database on every page, and every change is protected against cross-site request forgery.
A school platform: a Next.js web app, a realtime API, a media library with direct secure uploads, and an Android app with its own release pipeline.
Patient and doctor apps with an admin panel. It covers bookings, earnings, large medical-file uploads, and realtime chat and calls.
Proof, not promises
Every platform above serves real users on infrastructure I set up and look after myself.
Healthcare with Saudi government integrations, and fintech where security can't be skipped.
React and Next.js, Flutter and Android, and LLM agents. Whatever the product needs.
Arabic and Urdu right-to-left layouts, translated end to end, not added as an afterthought.
How I help
Tenants, roles, billing and audit trails are designed into the data model from the start, not patched in later. You get a codebase you own and a deployment that's already running.
Agents and LLM features with the controls that make them usable in a real business: approval steps, audit logs, and fallbacks when the model gets it wrong.
Flutter or native Android clients that share an API and a design system with your web app, so features ship to every platform at once.
An MVP that works in the demo but falls over in production. I audit it, fix the foundations and get it onto infrastructure you can rely on.
How it works
Users, flows, data and the riskiest unknowns, written down and agreed with a fixed quote.
A clickable, coded prototype so decisions get made on something you can actually use.
Weekly releases to a live staging site. You test the real product, not screenshots.
Production launch, monitoring and handover docs. I stay on for whatever comes next.
A note from me
Most platforms fail in the gaps: between the designer and the developer, the developer and DevOps, or the agency that built it and the team that has to run it.
I take those gaps out. I design the data model, write the API, build the web and mobile apps, and deploy them to servers I manage. The person who scoped your project is the one fixing it at 2 AM.
That's why my clients' platforms are in production and not stuck in staging.
The honest comparison
| Working with me | Agency | Offshore team | |
|---|---|---|---|
| Who builds it | The senior engineer you spoke to | Juniors, after the sales call | Varies by who's assigned |
| After launch | Same person runs and fixes it | A separate support contract | Usually you're on your own |
| Handoffs | None. Design, code and servers are one job | Design to dev to DevOps | You manage them |
| Cost | Fixed quote, agreed up front | Retainers and change orders | Cheap until rework piles up |
| Communication | A direct line, no account manager | Through an account manager | Timezone roulette |
The stack I ship with
FAQ
Platforms with real business logic: multi-tenant SaaS, ERPs, marketplaces, booking systems, internal tools and AI products. If it needs a database, user roles and a server, it's a good fit.
Both. I can deploy to your cloud or run it on infrastructure I manage, with monitoring, backups and ongoing fixes.
A fixed quote agreed before work starts, based on a written scope. If the scope changes, we agree the change in writing before I build it.
Yes. I start with an audit of the code, security and infrastructure, then a plan to stabilise it before adding features.
Yes. Everything lives in your repository from day one, with documentation for whoever works on it next.
Book a call or send an email describing what you're building. You'll get a written scope and a fixed quote.
You've reached the end, so…
I'll come back with a scope, a timeline and a fixed quote.
Book a call hello@sannanmalik.com