VAULT

Private · Master Plan · v1.0
VAULTTECH STACK

VAULT Tech Stack Overview

Owner: Trill Walker (CSO) Marketing lead: Tia Dunn Founder + face: Taj Hines Doc status: v1.0, 2026-07-28

1. Two-phase stack strategy

Y1 (2027): Mindbody Enterprise as the operating platform, custom skin over the top. Y3 (2029): Owned stack on Supabase + Stripe + Twilio + Mux, migration cutover for Charlotte flagship, franchise locations launch directly on the owned stack.

Why phase, not one-shot: shipping a fitness club member management platform from scratch is a 12 to 18 month build. We do not have that runway pre-open. Mindbody buys us reliability + speed to launch. Owning the stack later buys us margin, data leverage, and franchise scale.

Digital membership launches on the owned stack from Day 1 (see 01_DIGITAL_MEMBERSHIP.md). We do not want to migrate digital members mid-run.

2. Y1 stack: Mindbody Enterprise + custom skin

Mindbody Enterprise handles

  • Class scheduling, booking, waitlist.
  • Member billing, dues, package sales.
  • Retail POS + inventory.
  • Staff scheduling, payroll clock.
  • Reporting (base level).
  • Integrations to Apple Health, WHOOP, Oura, InBody.

Custom skin partner options

  • Marianatek (owned by Xplor Recreation, boutique fitness focus).
  • Zingfit (similar profile, high-end boutique).
  • Direct build with a Mindbody Enterprise partner shop (recommended: Xplor Recreation Enterprise partner network).

Recommendation: Mindbody Enterprise + Xplor partner shop for the custom skin. Xplor’s platform is fitness-native at the enterprise level and gives us a supported path if we want to stay on managed infrastructure longer than planned.

Y1 stack around Mindbody

  • Web (marketing + acquisition + digital signup): Next.js on Vercel.
  • Content library streaming: Mux, launched Y1 for digital membership, shared with physical members.
  • CRM: HubSpot Enterprise.
  • Data warehouse: BigQuery, mirrors Mindbody nightly via Fivetran.
  • Analytics: Mixpanel for product, PostHog for web + app funnel + session replay.
  • Transactional email: Postmark.
  • Transactional SMS + voice: Twilio.
  • Push: OneSignal in Y1, migrated to native APNs + FCM Y3.
  • Access control: HID Origo Mobile Access, integrates with Mindbody for member sync via middleware.
  • Video conferencing (private coaching, virtual founders room): Zoom Enterprise, Whereby as embedded fallback.
  • Design tokens + component library: Tailwind CSS + Radix primitives + shadcn-generated components on the marketing web. App uses React Native + a custom design system.

Y1 tech budget

  • Mindbody Enterprise setup + first year: $47,000.
  • Custom skin build: $85,000 to $120,000 one-time.
  • HubSpot Enterprise: $42,000 annual.
  • Mixpanel + PostHog + Mux + Vercel + Cloudflare + Supabase (digital side) + Twilio + Postmark: $180,000 to $240,000 combined annual.
  • HID Origo + door + reader hardware capex: $95,000 (see 07_OPERATIONS).
  • Engineering staff (2 senior + 1 mid): $520,000 fully loaded.

Total Y1 tech spend estimate: $970,000 to $1.06M.

3. Y3 stack: owned end-to-end

Data layer

  • Supabase (Postgres, Row-Level Security, Auth, Realtime, Edge Functions).
  • Read replicas per region as we scale internationally.
  • BigQuery mirror for analytics + warehouse.

Payments

  • Stripe direct. Subscriptions API for membership dues. Payment Intents for retail + coaching upsells. Stripe Terminal for in-club retail POS. Stripe Tax for automatic sales tax handling in North Carolina and each expansion market. Stripe Connect if we go franchise-controlled billing, TBD Y3 depending on franchise model.

Communication

  • Twilio for SMS, voice fallback.
  • Postmark for transactional email.
  • Resend for marketing email (Tia’s team).

Streaming + content

  • Mux for VOD + live streaming. Adaptive bitrate, DRM, per-title analytics.
  • Cloudflare Stream as failover CDN.
  • Backblaze B2 for cold archive.

Web

  • Next.js on Vercel. Fluid Compute for backend routes. ISR + PPR for member-facing marketing pages. Middleware for personalization (member vs. prospect).
  • Domain: thevault.club, plus regional domains as franchise expands.

Mobile app

  • React Native (Expo managed workflow, ejected as needed for HID and NFC deep integrations).
  • Shared codebase between iOS and Android.
  • Native modules for HID Origo Mobile Access, Apple Wallet, Google Wallet.

CRM + marketing ops

  • HubSpot Enterprise stays for CRM through Y3 minimum. Cost of migrating CRM off HubSpot rarely pays back on this timeline.

Data warehouse + analytics

  • BigQuery for warehouse.
  • dbt for transformations.
  • Mixpanel for product analytics on app.
  • PostHog for web funnel + session replay.
  • Metabase for internal dashboards, GM + Ops + Marketing.

Access control + hardware

  • HID Origo Mobile Access at every reader.
  • Wildcard fallback: physical black brass key card (see 00_APP_SPEC.md).
  • Camera + monitoring: Rhombus or Verkada for cloud-managed CCTV. Recommendation: Verkada for the tight ops integration + enterprise support.

Content delivery + CDN

  • Cloudflare (Workers, KV, R2 for member-uploaded assets like profile photos, CDN for marketing web, DDoS protection).
  • Vercel for Next.js app hosting.

AI + automation

  • Anthropic Claude API (via the Walker Group agent stack) for internal ops tooling, member sentiment analysis on feedback, and GM assistant surfaces.
  • Vercel AI Gateway for unified provider access + cost tracking.
  • Do not put an AI chat in the member surface at Y1 or Y3. The brand tone is human hospitality. AI stays back-of-house.

Y3 tech budget

  • Owned stack ongoing platform: $8,000 to $14,000 monthly at 800 to 2,500 members.
  • Payment processing: Stripe direct at 2.7 percent + 5 cents on volume above $1M annual.
  • Engineering staff (4 senior + 2 mid + 1 designer + 1 head of eng): $1.9M fully loaded.
  • Build for Y2 to Y3 migration: $450,000 to $650,000 one-time capex.

4. Broadcast IP integration

THE VAULT INVITATIONAL (see 12_BROADCAST_IP) needs streaming infrastructure that overlaps with the content library. Mux is the tie.

  • Live event day: Mux Live streams to VAULT app for members-only extended cuts, plus a public simulcast to whatever broadcast + streaming partner we sign (target: ESPN+, Peacock, or Amazon Prime Video, TBD Y2 during rights negotiation).
  • Backstage feeds and multi-cam ISO archived on flagship Synology + Backblaze.
  • Post-event highlight cuts published to library within 30 days.
  • The Walker Group’s existing content stack (audio + video pipelines under ~/.venvs/content and ~/.venvs/audio) supports post-production.

5. Security + compliance

  • SOC 2 Type II target within 18 months of Y1 open.
  • PCI DSS handled at the Stripe + Mindbody boundary in Y1, at Stripe boundary in Y3.
  • HIPAA-adjacent handling of member health data (InBody, WHOOP, Oura sync) even though we are not a covered entity.
  • Penetration test annually via a firm like Trail of Bits or Bishop Fox.
  • Bug bounty via HackerOne once app is stable, Y2.

6. Reliability

  • Y1 target: 99.5 percent app uptime.
  • Y3 target: 99.9 percent.
  • Multi-region Postgres via Supabase.
  • Vercel + Cloudflare edge network for web.
  • Runbook + incident response tied into PagerDuty. On-call rotates between engineering team and CSO office.

7. Migration risk

Cutover from Mindbody to owned stack in Y3 is the single highest-risk technical event in the roadmap. Mitigations:

  • Shadow-write from Mindbody to owned Supabase for 6 months before cutover.
  • Read-only Mindbody cache active for 30 days post-cutover as fallback.
  • Cutover done during a scheduled winter maintenance window, not during peak January signup.
  • Every member gets a personal note from Taj (email, signed) about the app upgrade the week of cutover. No one is surprised.

8. Sign-off

Founder + face approval: Taj Hines CSO: Trill Walker Marketing Director: Tia Dunn Head of Engineering: TBD, hire Q1 2027