The notebook

All AI & LLMs Cloud & DevOps Industry Insights Laravel & PHP Modernisation Performance & Scale SaaS & Product Security & Compliance

All posts 113 posts

15 Mar 2026 Laravel & PHP Sync conflict resolution beyond last-write-wins Last-write-wins is silent data loss with a friendly name. How I resolve sync conflicts deterministically when devices come back after days offline. → 14 Mar 2026 Cloud & DevOps Monitoring for Small Teams: A Full Stack Under €50 a Month Datadog-class bills make no sense below ~10 engineers, and alert fatigue is worse than no alerts. The exact stack I run for client projects — uptime checks, error tracking, slow-query and qu... → 11 Mar 2026 Cloud & DevOps Zero-Downtime Deploys Without Kubernetes: A Ladder of Options Most teams overshoot to blue-green or canary when an atomic symlink release plus a five-line health check meets their SLO. A complexity ladder (symlink → rolling → blue-green) with the expan... → 08 Mar 2026 Cloud & DevOps Do You Need Kubernetes? Hosting Choices for Small SaaS Teams An honest decision framework from someone who deploys client SaaS on everything from a €20 UpCloud VPS with Forge to managed containers: total monthly cost AND ops-hours cost for VPS, PaaS,... → 08 Mar 2026 Laravel & PHP Offline-first apps: what actually breaks when the signal dies Field inspection apps live in basements and plant rooms where there is no signal. What genuinely breaks offline — IDs, photos, auth, ordering — and the architecture that survives it. → 05 Mar 2026 Cloud & DevOps Cloud Cost Optimization for Small SaaS: A 30% Cut, No Downtime Mid-market SaaS teams routinely find 20–45% savings, and the biggest wins need no re-architecture: scheduling dev/staging off-hours (24/7 non-prod wastes 67% of its cost), right-sizing from... → 04 Mar 2026 Security & Compliance KYC flows that do not lose the customer Identity verification is where onboarding funnels go to die. How I structure KYC in SaaS products so compliance holds and the customer actually makes it through. → 02 Mar 2026 Security & Compliance PII in Logs and Backups: Fixing the GDPR Blind Spot Erasure requests are easy in the database and nearly impossible in logs, backups and error trackers — the blind spot that turns a clean app into a violation. Concrete fixes: log redaction pr... → 27 Feb 2026 Security & Compliance Web App Security Audit: What I Check Before Every Launch The pre-launch audit I run on every client project, as a checklist with the exact tools: security headers, auth/session hardening, rate limiting, mass-assignment and IDOR checks, dependency... → 27 Feb 2026 Laravel & PHP ERP invoicing through Netvisor Sales invoices flowing from a construction ERP into Netvisor: MAC-signed headers, XML payloads, cost-centre dimensions and the gotchas the documentation will not warn you about. → 24 Feb 2026 Security & Compliance The EU AI Act for SaaS Teams: What Applies When You Call an LLM API High-risk enforcement landed August 2026 with fines up to €35M, and most SaaS founders can't say whether their AI feature is in Annex III scope. As someone shipping LLM features for EU clien... → 21 Feb 2026 Security & Compliance EU Data Residency: Why an AWS Frankfurt Region Isn't Enough The common startup misconception that an EU region of a US hyperscaler satisfies residency — the CLOUD Act says otherwise. Decision framework for Nordic SaaS: when Hetzner, UpCloud (Finnish)... →