RahadianMuhammad Sutandar

Complete multi-tenant ESG product for Indonesian tourism and hospitality businesses, live and in active use. The DOKU payment gateway has been live in production since Jul 2026 and was tested end to end. 54 tables, 132 RLS policies, 195 metrics across eight frameworks, and PDF, Word, and Excel reports.

The challenge. Turn overlapping ESG frameworks and different company profiles and risk exposures into a manageable, auditable, and commercially operable disclosure workflow.

What I built. Integrated DOKU with HMAC-verified webhooks, a replay guard, one idempotent fulfillment function, a reconciliation sweep, and receipts only where money arrived. Built an eight-question risk self-assessment and profile-aware recommendation engine, evidence review, dual scoring, and deterministic multi-format reports. Website Carbon A+ (0.03 g CO2 per visit, cleaner than 93% of pages tested, 24 Oct 2026).

Wise Steps product for destination and accommodation schemes, used to run the firm's offline GSTC training in Bandung (22 to 23 Sep 2026) for 15 participants, including hotel general managers. It started as a bespoke portal for ITDC Nusa Dua (InJourney Group), built alone from Oct 2025 to Feb 2026 (61 of 62 commits); the client used it until its data moved into the product in Oct 2026.

The challenge. Turn a one-client evidence and review workflow into a multi-client product, then digitize self-assessment, review, account hierarchy, and subscriptions without compromising tenant isolation.

What I built. The first version brought a six-state evidence workflow, a scoring engine, realtime notifications, Excel export, and a live API security review. The product added parent-child tenancy, dual-track evidence review, audit logging, locale-aware Postgres functions for 340+ bilingual sub-indicators, and a Playwright persona harness that ran the training scenarios as automated QC. Since Oct 2026, supervising an intern on the GSTC v4.0 hotel self-assessment update: setting the direction, doing the final review, and fixing the remaining bugs.

Main contributor (88% of platform commits), working with one intern, on the public platform, Knowledge Hub, member gamification, admin CMS, and a community forum that share one Supabase backend. Live at sustainabletourism.id.

The challenge. Support content, community, and administration on one backend shared by two apps, while keeping the platform fast, accessible, and light on carbon.

What I built. Shipped the forum in about 4 weeks (Aug 2026, 55 merged PRs) with one login shared with the main platform, closed privilege-escalation holes found in an audit, and moved gamification scoring into the database. Improved landing-page speed and accessibility on desktop and mobile; Website Carbon A, 0.04 g CO2 per visit, cleaner than 91% of pages tested (22 Oct 2026).

Delivered end to end in about a month as product engineer, helped by an intern: 22 tables, workload and capacity logic, KPI lifecycle, project workflows, authentication hardening, and reporting, set up for around 32 staff. Handed over to the client in Jun 2026.

The challenge. Replace fragmented operational tools with a secure system that can model staff capacity, assignments, KPIs, and project delivery.

What I built. Built a data-driven Postgres workload engine, flag-based RLS, pg_cron refresh, KPI submission and validation, soft deletion, authentication controls, and modular Next.js interfaces.

Built alone in about two weeks for 40 hourly-rental apartment units in Bandung, live since 19 Oct 2026 with 15 users. It replaced bookings scattered across WhatsApp chats and manual Excel recaps with one system for front office, room boys, and owners.

The challenge. Move a busy hourly-rental operation off chat and spreadsheets without double bookings, price disputes, or lost payment records.

What I built. Enforced the business rules in the database: an exclusion constraint blocks double booking, a trigger locks prices, every booking change goes through an RPC, and payments and the audit trail are append-only. Added an owner insight dashboard with revenue per unit and per night plus Excel export, and a public landing page with live availability rated Website Carbon A+ (0.03 g CO2 per visit, cleaner than 94% of pages tested).

Pre-sales mockup built alone in 5 days (Jun 2026) and presented to a client, serving hotel, mall, and restaurant verticals from shared survey and dashboard engines with deterministic NPS and CSAT scoring. Archived; the demo is still online.

The challenge. Show a client how one transparent analytics product could adapt across verticals without duplicating UI and business logic.

What I built. Implemented configuration-driven theming and content, 18 Vitest tests, 1,050 seed responses, and rule-based theme and sentiment analysis. It is a frontend mockup with no backend; text analytics are heuristic, not NLP or ML.

Paste a TikTok or Instagram link and Gemini pulls out the restaurant, signature dishes, vibe and city, then matches it to Google Maps. Built alone in September 2026; the live demo is switched off, and the source code is public.

The challenge. Food spots found on social media get lost in bookmarks and screenshots, so deciding where to eat turns into guesswork.

What I built. Built Quick Save (multimodal parsing of reels and photo carousels of up to 35 slides), live Google Maps search, a journal and map of places to try, a community trending radar, and Taste Finder, an AI copilot grounded only on the user's own entries, with prompt-injection defences and a low temperature.