About NDEstates
NDEstates & NDPropertiesManagement are
Dyme is a financial planning app based in the Netherlands that helps users manage their finances by linking bank accounts to track spending, categorize expenses, and set saving goals.
It offers features like automatic contract management, subscription cancellation, and personalised money-saving advice.
With tens of thousands of downloads each month, Dyme is quickly becoming a popular tool for simplifying personal finance management.
The challenge
As Dyme scaled, several key challenges arose:
- Developers needed full visibility and control over production systems to ensure smooth, continuous deployments and minimise downtime.
- Business analysts required access to system data for real-time reporting and analysis, but querying production systems could create performance bottlenecks.
- With more employees working remotely, Dyme had to ensure that sensitive internal resources could only be accessed through secure devices, preventing unauthorised access and maintaining strong security postures.
The solution
We implemented a solution that not only provided Dyme with scalable infrastructure and data accessibility but also ensured secure access to internal resources for their remote workforce.
Utilizing Kubernetes on Google Cloud with a GitOps approach, we provided developers with full control over their applications in production.
Automated CI/CD pipelines allowed for quick deployments and streamlined operations, while Kubernetes’ self-healing capabilities ensured high availability and resilience.
To address the need for real-time data access without impacting production, we integrated Google Cloud’s BigQuery.
This enabled business analysts to run complex queries on mirrored data, separating analytics from production workloads, which maintained system performance and provided deeper insights into customer behavior and financial trends.
To ensure secure remote working, we implemented a solution where internal resources were only accessible through devices that met strict security requirements.
Using tools such as Tailscale for secure VPN access combined with device management tools like CrowdStrike and Kolide, we enforced strict access control policies.
Only devices that complied with security protocols (e.g., updated operating systems, encrypted drives, and active endpoint protection) were granted access to Dyme’s internal resources.
This protected sensitive financial data and ensured regulatory compliance.
Key results
Developers gained full control over their production environments, leading to a 30% increase in deployment frequency and a significant reduction in incidents during deployments.
Offloading data queries to BigQuery eliminated performance bottlenecks, ensuring a seamless user experience even during high traffic periods.
Secure remote access policies ensured that internal systems were only accessible via trusted devices, improving security and compliance while supporting a distributed workforce.
The Kubernetes-based infrastructure enabled rapid scaling in response to increasing demand, with automated monitoring and alerting ensuring system health and uptime.
