Example reference deployment · In production today

The Partner Portal — so partners stop emailing your team for data.

A self-service portal for MSSPs, resellers, and distributors. One source of truth for the customer base, billing-ready exports, early-warning churn signals, and a modern API. The version you see is running in production at a reference customer.


01 / Live Mockup
Live mockup

See the Partner Portal in action.

Channel self-service for MSSPs, resellers, and distributors. Two business models, tab-based Customer Detail, real-time usage tracking, and a modern API — configured to your billing cycles and partner relationships. The version below is running today at an anonymised reference deployment.


02 / Two Models, One Portal
The defining feature

Two business models. One portal.

The portal automatically presents the right reports, eligibility logic, and metrics for each partnership type. A single MSSP partner serving customers across multiple regions can switch between partnerships from a dropdown without logging out.

MSSP model

Tracks: peak product usage per customer.

  • Billing cycle: 26th of previous month → 25th of current month
  • Peak usage per product, monthly summaries
  • 3 / 6 / 12-month trend charts
  • Excel export shaped for the MSSP billing model

Reseller model

Tracks: active orders, ACV, renewals.

  • Billing cycle: calendar month (1st → last)
  • ACV total across portfolio with trend
  • Renewal forecast: 30 / 60 / 90 days
  • Per-customer ACV growth and status distribution

03 / Two Modes
Two modes

One portal. Two faces.

Partner mode

The full MSSP/Reseller portal with every feature enabled. Used by partner administrators and operations staff.

Demo mode

Realistic simulated data for sales conversations — no real customer data ever exposed. A discreet “Demo” pill makes it visually unmistakable.


04 / The Six Pillars
The six pillars

Everything they used to email your team for — self-service.

Customer Dashboard

The daily-driver page. Portfolio totals up top — customers, active count, ACV, renewals in the next three months, plus per-product peak tiles for MSSP partners. The customer table is grouped under three colour-banded section headers (CUSTOMER · COMMERCIAL · SECURITY CENTER) so a partner scanning the table immediately sees which fields are about who-the-customer-is, which are commercial, and which are product-level signals.

Customer Detail (tab-based)

Clicking a customer opens it as a new tab above the page. Tabs persist across the session so a partner can keep multiple customers open and switch between them without losing context. Six sub-tabs per customer: Tasks (with unread badge), Commercial overview, Product usage (chart per product, configurable date range), Engagement matrix, Churn Risk indicators, Contact information.

Partnership-aware Report

A single Report page in the rail whose content adapts to the partnership type. For an MSSP partnership: billing-cycle aware (26th of previous month → 25th of current), grouped bar chart by product, click-into-bar drill-down, Excel export with invoice-breakdown rows when pricing is configured. For a Reseller partnership: calendar-month cycle, ACV-over-time line chart, summary cards for Total Customers / Active / ACV / 3-month renewals, monthly product-usage chart, Excel exports for both monthly usage and per-customer ACV history. A multi-portal partner that holds both partnership types sees the appropriate content for whichever partnership is currently selected.

Roles, restrictions, notifications

Four user roles — Admin, User (assigned-customers-only for account managers), Marketing (Partner Kit and Resources only), Notifications (email-only, no portal login). Customer-level restriction lets admins lock a User to specific Security Center IDs, enforced everywhere — dashboard, reports, API responses, notification scope. Per-user notification preferences (immediate / daily / weekly digest, category opt-in/opt-out) managed by admins for any user, by users for themselves.

Modern API for automation

Modern API for partners that want to automate. Scoped, secure, and rate-limited — partners can feed the portal’s data into their own billing systems, dashboards, and internal tooling without going through your team. Token-based authentication, per-partner scope, IP and origin restrictions, full pagination, daily usage stats. Technical specifics are available under NDA during the Assessment.

Self-service partner essentials

Three full pages under Partner Essentials. Kit — structured library of marketing and sales collateral organised by category, with in-portal preview and per-file download (sales playbooks, pitch decks, competitive battlecards, and similar). Resources — card grid of quick-action shortcuts for the workflows partners hit most (welcome walkthroughs, deal registration, pricing calculators, co-sell engagement, partner training, sandbox provisioning, and similar). Support — card grid of every help channel (help centre, case submission, service-health dashboards, roadmap voting, billing enquiries, talk-to-your-CSM scheduling, and similar). The exact set of categories in each view is configured during the build phase. Tags Manager (custom tags, multi-tag, bulk assign) and persistent column preferences round it out.


05 / Behind the Screen
Behind the screen

A scheduled engine, an interactive frontend, integration write-back, and a separate-process API. Each layer scales independently.

The Partner Portal isn’t just a UI on top of your data. The same architectural pattern that powers the Processor and the CSM Portal applies here: a scheduled background engine generates tasks and digest emails on a cron schedule; an interactive frontend serves the dashboard and reports with sub-second response times; integration write-back keeps your CRM and subscription system in sync; and a separate-process external API runs on its own port with its own scope-based auth.

Scheduled task engine + email digests

  • Daily and weekly cron jobs (06:00 UTC default) running as a separate Node process
  • Same five-category rule engine as the CSM Portal — renewal upcoming, inactive scanners, failed scans by product, high or inactive product usage, commercial signals
  • Outlook-compatible HTML digest emails with AES-GCM encrypted deep-link tokens — click lands the recipient on the right customer with no leaked context
  • Per-user customer scope honoured (restricted users only see their assigned customers in the digest)

Security architecture

  • Memory-only session state — nothing sensitive in localStorage or sessionStorage
  • Browser-fingerprint-bound sessions, validated on every API call
  • AES-256-GCM authenticated encryption for password storage with portal-type-specific keys
  • Out-of-band password delivery (24-hour TTL, split passphrase delivered separately)
  • Portal type derived from session document on every request — never from a header (prevents header-spoofing)
  • 2FA TOTP, account lockout with stage-based ladder, anti-clickjacking, strict CSP

06 / Configuration
What your version will be configured for

The architecture is delivered. The configuration is yours.

The reference deployment is configured for one specific reference customer’s products and partner relationships. Your version is configured for your products, your partner models, your billing cycles, and your branding.

Configuration scope

What’s configured for your business: your channel models · your billing cycles · your branding and exports · your role definitions · your CRM and product backend integrations. The Assessment identifies exactly what your channel relationships need.

See the Partner Portal running live.

The 30-minute discovery call includes a live walkthrough of the Partner Portal at an anonymised reference deployment — with a confidentiality agreement before any specifics are shared.

Book a 30-minute call