Client
SPI Brunei
Product
SPIBN Keyva
Year
2025
Role
Full-Stack Developer (Solo)

SPI Brunei operates across multiple environments, each generating continuous sensor data from different networks and sources. The challenge was not a lack of data — it was that the data lived in disconnected systems, making real-time visibility and decision-making impossible without a platform that could unify it all.

SPIBN Keyva is a full-stack IoT monitoring platform that ingests data from multiple external sensor APIs, decodes specialized data formats, surfaces everything through interactive dashboards and maps, and delivers instant alerts via WhatsApp — with role-based access for every type of user.

The Problem

Sensor data was everywhere. A unified view was nowhere.

Multiple sensor networks. Multiple data sources. Multiple stakeholders needing different views of the same information. Without a shared system, real-time decision-making wasn't possible.

Disconnected data sources

Sensor data came from multiple external networks with no central place to view or compare it.

No real-time visibility

Without live ingestion and display, teams were always working off stale data — unable to respond to changing conditions as they happened.

No alert infrastructure

When readings crossed critical thresholds, there was no automated system to notify the right people immediately.

No unified access model

Different stakeholders — admins, staff, and customers — needed different views, but there was no way to scope access appropriately.

What's Inside

From Ingestion to Notification

Keyva covers the full lifecycle of IoT data — from ingestion to visualization to notification.

Real-Time Dashboards

Live sensor readings displayed through interactive time-series charts, with historical trend analysis and date range filtering. Each dashboard is purpose-built for the data it displays.

Geolocation Maps

Interactive maps powered by Mapbox and Leaflet showing device locations, live positions, movement history, and path visualization.

Multi-Tier Alert System

Four severity levels — Critical, High, Medium, and Low — each with distinct color coding, visual indicators, and resolution tracking with timestamps.

Automated Data Pipeline

Continuous data ingestion from external APIs with duplicate detection, automatic timezone conversion, and transaction-safe bulk insertion.

WhatsApp Notifications

Instant outbound alerts via Meta WhatsApp Business API when sensor thresholds are crossed. Bulk sending to all active contacts with contact management and activation controls.

Role-Based Access

Three user roles — Admin, Staff, and Customer — each scoped to the tools and data relevant to their responsibilities.

API Management Panel

Staff-accessible interface for manual sync triggers, device configuration and inspection, CSV data import with per-row validation, and bulk data operations.

IoT Device Management

Automatic device discovery and registration from API sources. Active/inactive status tracking, device categorization, and raw field inspection for debugging.

Data Import & Export

CSV import for bulk sensor data upload with per-row error reporting. Historical data API endpoints with date range filtering for downstream use.

Integrations

Multiple External Systems — One Interface

Multiple external systems — connected, managed, and surfaced through one interface.

IoT Sensor API (EosGate)

Primary sensor data source. Authenticated API calls bring in live readings from all connected sensor networks continuously.

WhatsApp Business API

Meta Graph API v22.0. Outbound notifications via pre-approved message templates with dynamic parameters sent to all active contacts.

AWS Lambda

Decodes raw hex-encoded binary payloads from specialized sensors. Handles 47-byte data frames with XOR checksum validation.

AWS RDS (PostgreSQL)

Primary database for all sensor data, user accounts, alert records, and device registry. Connection pooling via psycopg2.

Mapbox + Leaflet

Interactive geolocation mapping. Mapbox GL for base layers, Leaflet for device pins and position overlays.

Google Login

Sign in with Google — staff and users log in using their existing Google account instead of creating a separate password. Simple, secure, and familiar.

Tech Stack

Built for Reliability

Production-grade infrastructure — containerized, cloud-hosted, and built for reliability.

Django 5 · DRF · Python 3.12
Bootstrap 5 · SCSS/Sass
ApexCharts · Chart.js
Leaflet · Mapbox GL
PostgreSQL on AWS RDS
Docker · Gunicorn · Nginx
Heroku (staging + production)
i18n — EN, FR, AR, DE
The Scale

Built for Complexity

6+

External integrations connected

3

Specialized real-time dashboards

4

Alert severity levels

3

User role tiers

4

Languages supported

2

Deployment environments

Security

Built-In Protection

CSRF Protection

CSRF token protection on all forms.

Secure Sessions

HTTP-only, HTTPS-only, SameSite=Lax session cookies.

Access Control

Role-based access control with custom decorators.

Email Verification

Email verification required for new accounts.

Secure Resets

Token-based password reset flow.

Secret Management

All secrets managed via environment variables.

everbetter

We build platforms that work.

Every business is different — let's talk about what you need and how we can build it.