DEV Community

WeRumo
WeRumo

Posted on

How We Built a Zero-Database, High-Performance Multilingual Platform for German Relocation & Business Setup

#architecture #performance #privacy #softwareengineering

When architecting software solutions for the German corporate and relocation ecosystem, technical architecture quickly collides with stringent legal frameworks. Between GDPR (DSGVO), statutory retention requirements, and cross-border identity processing for expatriates and corporate founders, persisting personal records in persistent SQL databases introduces significant operational and compliance liability.

At WeRumo, we took a fundamentally different engineering route: building a zero-database, static-first, edge-orchestrated architecture designed specifically for high-speed delivery, strict compliance, and effortless multi-language internationalization.

In this deep dive, we break down how we designed the platform, eliminated database attack vectors, and optimized our infrastructure for 100/100 Core Web Vitals across Europe.

1. The Architectural Challenge: Compliance by Design

Building digital tools for German business formation (UG & GmbH setup) and skilled immigration dossiers (§ 18g AufenthG EU Blue Card, § 20a Chancenkarte) involves handling sensitive corporate and personal metadata:

  • Notarial articles of association (Musterprotokoll / Satzung)
  • Residential confirmations (Wohnungsgeberbestätigung pursuant to § 19 BMG)
  • Commercial register excerpts (Handelsregisterauszug)
  • Proof of Stammkapital deposit and Sperrkonto confirmations

Under GDPR Art. 5 (Data Minimization) and Art. 17 (Right to Erasure), storing intermediate documents and applicant PII in a centralized SQL cluster creates extensive overhead: audit logs, encryption at rest, token rotation, automated purge scripts, and leak surfaces.

The Solution: Decouple public interaction, questionnaire pipelines, and document drafting from persistent web databases.

2. Frontend Architecture: Edge-Rendered, Multi-Regional Next.js

Our web layer is built on Next.js with TypeScript and Tailwind CSS, deployed to distributed edge networks.

A. Static Dictionaries with Zero Runtime Penalty

Rather than querying dynamic localization tables, our multi-locale architecture (/en, /de, /ru, /uk) utilizes pre-compiled immutable locale trees.

export const supportedLocales = ['en', 'de', 'ru', 'uk'] as const;
export type Locale = (typeof supportedLocales)[number];
Enter fullscreen mode Exit fullscreen mode

By compiling all routes at build time with Incremental Static Regeneration (ISR), Time to First Byte (TTFB) is kept under 35ms across European edge nodes without any cold-start database connection pool latency.

B. Component Hierarchy & Accessibility

Every interactive module adheres strictly to WCAG 2.1 AA accessibility guidelines, semantic HTML5 landmarks, and structured JSON-LD Schema markup (Organization, Service, FAQPage), providing rich indexing for search engines and AI web crawlers.

3. Stateless Form Pipelines & Transient Edge Processing

How does a platform process business inquiries and service requests without a database?

[ Client Browser ]
        │  (Client-side Zod validation)
        ▼
[ Edge API Middleware (Next.js Route Handler) ]
        │  (HMAC Signature + Rate Limiting + Schema Sanitization)
        ▼
[ Transient Encrypted Webhook (n8n Orchestration) ]
        │
   ┌────┴────────────────────────┬─────────────────────────┐
   ▼                             ▼                         ▼
[ Direct Alert Bot ]      [ PGP Encrypted Mail ]    [ Ephemeral Buffer ]
Enter fullscreen mode Exit fullscreen mode
  1. Client-side Verification: Every input (tax IDs, company registration numbers, visa timelines) is validated client-side via type-safe zod schemas.
  2. Edge Route Handler: When submitted, an ephemeral Edge Route Handler verifies an HMAC token, strips untrusted properties, and validates origin headers.
  3. Event Dispatch: Instead of executing an INSERT INTO users query, the payload is converted into an encrypted event dispatched directly to a self-hosted, hardened n8n workflow runner.
  4. Transient Storage: Data is processed instantaneously into actionable operational alerts and encrypted customer receipts, leaving zero residual footprint on web-accessible servers.

4. Zero-DB Security Benefits in Numbers

By eliminating traditional web databases:

  • Zero SQL Injection Vector: There is literally no database engine running behind the public API routes.
  • Zero Inactive PII Exposure: A data breach of the web server yields zero persisted customer databases, password hashes, or identity records.
  • DDoS Resilience: 99.8% of platform assets are cached statically at CDN edge nodes, reducing server CPU compute spikes during traffic surges.
  • Near-Zero Infrastructure Footprint: Serverless execution and static assets mean hosting costs remain flat even as consultation volume scales.

5. Key Takeaways for Full-Stack Teams

When building platforms in regulated industries:

  1. Challenge the 'Default Database' assumption: Not every interactive web application needs a persistent PostgreSQL or MongoDB backend.
  2. Lean on Edge & Workflow Engines: Moving state management and document routing to specialized workflow orchestrators (like n8n) drastically simplifies web architecture.
  3. Make Performance Part of SEO: Instant static page loads directly boost conversion rates and domain authority.

To inspect how this architecture operates live in production for international founders and expatriates, visit the live deployment at WeRumo Consulting.

What are your thoughts on zero-database architectures for compliant business platforms? Let's discuss in the comments below!

Top comments (0)