BizBuy: a marketplace for buying and selling businesses in the UAE
From listing to signed offer
Buying a business is a paperwork marathon: financials to verify, documents to exchange, offers to negotiate, and a dozen chances for the deal to stall. BizBuy puts the whole journey in one place, from the first listing view to a signed offer. The project owner knows deal-making inside out and built the first version with AI. Starting from that prototype, we launched to production about four weeks later.
- 01
Listings buyers can trust
Every listing carries revenue, net profit, valuation multiples and ROI up front, with financials flagged as verified or self-reported. Buyers filter by sector, emirate, price and revenue.
- 02
KYC without the queue
Buyers verify identity by uploading a passport. AI extracts the data and screens it against UN and OFAC sanctions lists, approving automatically, with a human review only on the edge cases.
- 03
Seller onboarding that finishes
A guided setup wizard walks sellers through information, financials, trade license and price, with a completeness score that shows exactly what is missing before publishing.
- 04
A real due diligence room
Trade licenses, organizational charts, lease agreements, three years of P&L and balance sheets, uploaded once and shared with qualified buyers under access control.
- 05
Offers without the lawyer ping-pong
Buyers structure an offer (price, payment split, due diligence window, validity) and the system drafts the non-binding offer letter automatically, down to the governing-law clause.
- 06
Deals tracked to the finish
Both sides see the same pipeline: discovery, NBO, due diligence, SPA. No one wonders where the deal stands.
Every screen
Stack: NestJS, Next.js 15, PostgreSQL, strict TypeScript end to end, AI document extraction with EU data residency.
From AI prototype to production
This is the prototype-to-production service, done in full. The prototype proved the idea. Then came the part AI does not do on its own:
- Security Login tokens that rotate and detect replay, and rate limiting on every route to shut down abuse before it starts.
- Privacy & access Personal data is encrypted in the database yet stays searchable, every log line is scrubbed so passports and emails never end up in a logfile, and every query is scoped to its user, so nobody can ever read someone else's data.
- A twin QA environment A full second copy of the platform, its own site, API and database, where every change proves itself before real users ever see it.
- Releases without surprises Database changes ship as scripted steps that run automatically before each release goes live. If a step fails, the release does not go out.
- Reliability Nightly backups streamed to a second cloud provider, watched for staleness, and proven with a restore drill that actually ran.
- Compliance UAE data-protection retention rules and weekly sanctions-list refreshes, built into the system's schedule instead of someone's calendar.
- AI kept on a leash Every AI call has a timeout and a fallback, documents are processed under EU data residency, and their contents are never written to a log.
- Confidence 585 automated tests, plus 11 end-to-end journeys that drive AI-generated fake buyers and sellers through the real verification pipeline before any release.
If you have built something with AI that works on your machine, this is what the finished version looks like.
Tell us what you are building.
A few lines is enough: what the business does, what is not working, and what you would like to be true in six months. Plain words are fine; writing the specification is our job.