Web application development

Web applications with accounts, roles, workflows and data, not just pages.

Thalenor develops custom web applications: customer portals, admin dashboards, SaaS products, booking platforms and internal tools that run in the browser and connect to real data.

All services

What is the difference between a website and a web application?

A website presents information to visitors: services, proof, contact. A web application lets signed-in users do work: create records, manage orders, approve requests, see dashboards, collaborate. Web applications need authentication, roles and permissions, a database, an API and careful interface design for repeated daily use.

Application types

Each with a different interface logic.

01

Customer portals

Self-service accounts: documents, status, requests, payments.

02

Internal operations tools

Dense tables, filters, bulk actions, audit trails, roles.

03

SaaS products

Multi-tenant architecture, billing, onboarding, admin.

04

Booking and scheduling systems

Availability, confirmations, reminders, calendar sync.

05

Analytics and reporting platforms

Dashboards, drill-downs, scheduled exports, permissions on data.

Operational scenario · illustrative

A client portal request, from login to resolution.

Illustrative portal for a professional firm. Roles decide what each person sees; the audit trail shows what happened.

  1. 14:02ClientClient signs in and opens 'Documents'. Sees only their own matters.
  2. 14:05ClientUploads a signed agreement and raises a request: 'Please confirm receipt.'
  3. 14:05SystemRequest routed to the matter owner; notification sent; SLA timer started.
  4. 15:30StaffAssociate reviews, adds an internal note (invisible to client) and replies.
  5. 15:31SystemActivity logged; client sees the reply and the document status 'Received'.
SYSTEM STATEstep 01 / 05
UserM. Dhillon · Client
RoleClient (read-only)
ViewDocuments · 12 files

Permissions are enforced by the API, not just hidden in the interface.

When it goes wrong

The client's session expires mid-upload.

Graceful

The upload resumes after re-authentication; nothing is lost.

Clear message

The interface explains what happened rather than failing silently.

Secure

Expired sessions cannot be reused; the event is logged.

Web Applications

The browser is the most practical place to run a business tool.

No installs, works on every device, one version for everyone. Most internal systems, portals and SaaS products belong here.

Engineering foundations

What every serious web app needs.

01

Authentication

Secure sign-in, sessions, password reset, optional SSO.

02

Roles and permissions

Who can see and change what, enforced on the server.

03

Data model and API

A schema that matches the business, exposed cleanly.

04

Interface

Fast, accessible, designed for repeated use.

05

Operations

Monitoring, backups, deployment pipeline.

Architecture

What a web application needs underneath.

Explained plainly: each layer answers a question a buyer should ask.

L1
Client
BrowserResponsive layoutAccessibilityOffline hints
Works on every device without installs.
L2
Frontend
Application shellForms & validationTables & filtersNotifications
Designed for repeated daily use.
L3
Auth
Sign-inSessionsPassword resetSSO (optional)Roles
Who is this, and what may they do?
L4
API & business logic
ValidationPermissionsWorkflowsSearch
Rules live on the server where they cannot be bypassed.
L5
Data & background
DatabaseFile storageQueueScheduled jobsBackups
Slow work runs in the background; data is backed up.
L6
External services & ops
PaymentsEmailAnalyticsMonitoringAlerts
Integrations behind adapters; problems visible early.
Multi-tenancy

For SaaS: tenant isolation at the data layer, per-workspace roles and billing.

Performance

Pagination, indexing and caching where volume demands it.

Deployment

Pipeline, staging environment, rollbacks.

What buyers ask before committing

Straight answers to the questions that decide a project.

What we would not do
  • Enforce permissions only in the interface.
  • Build a mobile app when a responsive web application meets the requirement.
  • Skip staging and monitoring to launch a week earlier.

Website or web app?

If visitors read, it is a website. If users sign in and do work, it is a web application. Many businesses need both, connected.

Can it grow into a SaaS product?

Yes, if it is designed with tenancy and billing in mind from the start. We ask early.

What about mobile?

Responsive first. A native app only when device features or offline use justify it.

How do you handle permissions?

Role-based access enforced by the API, with an audit trail of who changed what.

Can it integrate with our CRM and accounting?

Usually, through APIs. Integration points are designed as adapters so providers can change.

Questions

Questions worth asking first.

Yes. Responsive design covers most needs. If offline use or device features are essential, a mobile app may be justified; we will say which.

Start here

Describe what your users need to do.

Roles, tasks and the data they touch. From that we can shape the application and a realistic first release.

contact@thalenor.com