Muhammad Mustafa logo

Blog

Notes on building production SaaS and AI products — real lessons from React, Next.js, Node.js, Supabase, and shipping code that real users depend on.

UAE PDPL compliance architecture for a SaaS application showing consent, encrypted data, access controls, user rights and audit logs

August 14, 2026 · 10 min read

UAE PDPL Compliance Checklist for SaaS Applications

A practical UAE PDPL compliance checklist for SaaS applications covering consent, privacy by design, user rights, vendors, security and data transfers.

Arabic and English AI chatbot architecture for an Abu Dhabi business using RAG, WhatsApp, CRM integration and human support

August 8, 2026 · 10 min read

Arabic AI Chatbot Development for Abu Dhabi Businesses

Build a secure Arabic AI chatbot for Abu Dhabi businesses using bilingual RAG, WhatsApp integration, human handoff, privacy controls and testing.

UAE PASS integration architecture connecting a Next.js application and Node.js API to secure UAE digital identity services

August 3, 2026 · 10 min read

UAE PASS Integration with Next.js and Node.js SaaS Apps

Build a secure UAE PASS integration for Next.js and Node.js SaaS apps, covering OAuth 2.0, account linking, corporate users, testing and launch.

UAE e-invoicing integration architecture connecting a SaaS platform, accredited service providers, Peppol and the Federal Tax Authority

August 1, 2026 · 9 min read

UAE E-Invoicing Integration Guide for SaaS in 2026

Prepare SaaS and ERP systems for UAE e-invoicing in Dubai, Abu Dhabi and Sharjah using Peppol PINT-AE, ASP integration, validation and audit logs.

Next.js security checklist showing dependency patching, Server Action authorization, CSP headers, and production verification

July 24, 2026 · 8 min read

Next.js Security Checklist After the July 2026 Release

Use this practical Next.js security checklist to patch July 2026 issues, protect Server Actions, enforce authorization, add CSP headers, and verify deployment.

Offline-first React PWA architecture showing TanStack Query, IndexedDB, a service worker, and a cloud API

July 21, 2026 · 9 min read

Offline-First React PWA with TanStack Query: A Practical Guide

Build an offline-first React PWA with TanStack Query, IndexedDB, service workers, mutation queues, conflict handling, and reliable reconnect sync.

ExtJS and AngularJS enterprise dashboard migrating to a modern Angular 19 interface

July 17, 2026 · 6 min read

Angular Migration: ExtJS and AngularJS to Angular 19

A practical Angular migration guide for modernizing ExtJS and AngularJS enterprise dashboards through safe version upgrades from Angular 8 to Angular 19.

Supabase Row Level Security diagram separating admin, coach, and team database access

July 17, 2026 · 5 min read

Supabase RLS for Multi-Role Apps: What I Learned

A practical guide to Supabase RLS for multi-role apps, covering team isolation, role permissions, policy design, testing, and common security mistakes.

Diagram showing Stripe subscription seats syncing with a multi-tenant database via webhooks

July 16, 2026 · 5 min read

Stripe Per-Seat Billing: What Actually Breaks

Lessons from implementing Stripe per-seat billing in a multi-tenant SaaS (CultureAI) — where seat counts actually get out of sync, and how to prevent it.