Success Story

Craftech built Benji Pays' DevOps infrastructure: multi-account AWS, blue-green CI/CD and PCI DSS from day one

Benji Pays is a SaaS accounts-receivable automation platform based in Vancouver, Canada. It connects accounting systems (QuickBooks, Xero) with multiple payment processors (Stripe, Moneris, Elavon, Bambora and others) to automate collections, accounting sync and payment management. Its customers are mainly MSPs and SMBs in North America, with expansion underway into the UK and Australia. Craftech has acted as its infrastructure team since August 2024.

Fintech / Accounts-receivable automation (PCI DSS) Aug 2024 – present (ongoing relationship)
Modernizacion

Challenge

Benji Pays needed an infrastructure team able to build and evolve its AWS platform professionally, with a focus on PCI DSS compliance —because it processes payments—, secure zero-downtime deployments and a scalable base to support business growth. The relationship started with an assessment that surfaced the gaps and priorities of the existing infrastructure.

Solution

Craftech acts as Benji Pays' infrastructure team, covering design, implementation and continuous operation. It set up the multi-account AWS organization (Production / Staging / Shared) with access managed via IAM roles —eliminating Access Keys—, implemented a CI/CD pipeline with GitHub Actions and blue-green deployment on Elastic Beanstalk (web, portal, QBD, webhooks, API server), and keeps the platform current (Amazon Linux 2 → AL2023, Node.js 20 → 22). It added Redis on ECS, transactional email infrastructure with global SES, monitoring with Elastic Beanstalk + CloudWatch and infrastructure-as-code for the Beanstalk environments. In parallel it drives PCI DSS compliance (PCI pentesting, FIM solution) and is advancing a DRP strategy and a multi-region expansion toward London and Melbourne.

Results

Benji Pays has a CI/CD pipeline with blue-green deployment running in production (zero-downtime deploys), the platform updated to Node.js 22 and Amazon Linux 2023, and a multi-account infrastructure with role-managed access and no Access Keys. The PCI DSS security posture is established and continuously evolving, and the platform remains stable while supporting the business's expansion into new markets.

Stack & technologies

AWS Elastic BeanstalkGitHub ActionsAmazon ECSRedisAmazon SESAmazon CloudWatchTerraformAWS IAM

Facing a similar challenge?

Get a free AWS cost & architecture assessment.

The future of your company
takes off with Craftech

Leverage our AWS expertise to propel your company into the cloud.

Get your free assessment