Ongoing digital development partnership across apps, APIs & cloud

Digital platform project background

Positive Group empowers people and communities to develop key psychological and organisational skills, working directly with teams, and large organisations.

Arkay Digital has supported their digital initiatives over several years, focusing on the design, development, and maintenance of the technology that underpins their learning management system (LMS) and associated mobile applications. This collaboration built a robust foundation for managing complex integrations, enterprise client requirements, and scalable user access.

The challenge

One large digital initiative required a secure, scalable platform capable of supporting multiple enterprise clients, each with strict authentication and data management requirements. Security was a key priority, as the clients themselves operated under rigorous standards.

Arkay Digital supported the project by implementing best practices for secure development, assisting with infrastructure hardening, and contributing to the organisation’s ISO 27001 accreditation process. Additionally, synchronisation between mobile applications and the LMS had to be seamless, ensuring consistent access, progress tracking, and data integrity across the platform. Performance and reliability were critical to maintain enterprise-grade uptime and responsiveness.

The solution

Arkay Digital developed a bespoke LMS platform supported by a secure API layer to enable reliable communication between web and mobile applications.

The iOS and Android apps – initially built in Objective-C and Java, later migrated to Swift and modern Android frameworks provided a seamless user experience for accessing content, tracking progress, and interacting with the platform.

Security was integrated throughout the system: best practices for authentication, data encryption both at rest and in transit, and access control were applied, ensuring compliance with enterprise-level standards. Arkay Digital also supported the ISO 27001 accreditation process, contributing to the security audits and helping develop a system that successfully met penetration testing and compliance requirements.

All code was version-controlled using Git and deployed through a structured deployment process. Automated checks were integrated to validate code quality and security before updates were applied, ensuring consistent, reliable releases across the platform.

The architecture separated application logic, storage, and databases, enabling scalability, improved performance, and maintainability. Cloud-based hosting with encrypted connections and monitoring further ensured uptime and reliability for enterprise clients

The following diagram shows a high-level overview of how the LMS, mobile apps, and integrations connect within the platform, representing a best-practice architecture for secure and maintainable systems.

graph TD
    %% Styles
    style AppUser stroke:#146aff,stroke-width:2px,rx:8,ry:8,fill:#f9f9f9,stroke-dasharray: 5 5
    style LMSUser stroke:#146aff,stroke-width:2px,rx:8,ry:8,fill:#f9f9f9,stroke-dasharray: 5 5
    style WAF_App stroke:#999999,stroke-width:2px,rx:8,ry:8,fill:#f9f9f9,stroke-dasharray: 5 5
    style WAF_LMS stroke:#999999,stroke-width:2px,rx:8,ry:8,fill:#f9f9f9,stroke-dasharray: 5 5
    style App_iOS stroke:#146aff,stroke-width:2px,rx:8,ry:8,fill:#f9f9f9
    style App_Android stroke:#146aff,stroke-width:2px,rx:8,ry:8,fill:#f9f9f9
    style LMS stroke:#146aff,stroke-width:2px,rx:8,ry:8,fill:#f9f9f9
    style API stroke:#146aff,stroke-width:2px,rx:8,ry:8,fill:#f9f9f9
    style Auth stroke:#146aff,stroke-width:2px,rx:8,ry:8,fill:#f9f9f9
    style DataStore stroke:#146aff,stroke-width:2px,rx:8,ry:8,fill:#f9f9f9
    style CRM stroke:#146aff,stroke-width:2px,rx:8,ry:8,fill:#f9f9f9
    style Assets stroke:#146aff,stroke-width:2px,rx:8,ry:8,fill:#f9f9f9

    %% Nodes
    AppUser["App User"]
    LMSUser["Direct LMS User"]
    WAF_App["Security Layer / WAF (WAF / SSL / Caching)"]
    WAF_LMS["Security Layer / WAF (WAF / SSL / Caching)"]
    App_iOS["iOS App"]
    App_Android["Android App"]
    LMS["LMS Platform"]
    API["Custom API"]
    Auth["Authentication System"]
    DataStore["Encrypted Data Store"]
    CRM["External CRM System"]
    Assets["Static Assets"]

    %% Connections - App Path
    AppUser --> App_iOS
    AppUser --> App_Android
    App_iOS --> WAF_App
    App_Android --> WAF_App
    WAF_App --> API
    WAF_App --> LMS

    %% Connections - Direct LMS Path
    LMSUser --> WAF_LMS
    WAF_LMS --> Auth
    Auth --> LMS

    %% Remaining connections
    LMS --> DataStore
    LMS --> CRM
    LMS --> Assets
    API --> Auth

The outcome

The ongoing partnership delivered a secure, scalable, and maintainable platform that successfully supported multiple enterprise clients. Integration between mobile apps, the LMS, and enterprise systems streamlined workflows and improved data accuracy, while robust security measures ensured compliance with industry standards. Arkay Digital’s involvement across infrastructure, development, and consulting helped Positive Group maintain a technically reliable digital ecosystem.