A HealthTech SaaS with ~50,000 monthly users was hitting workflow timeouts during peak. SOC 2 Type II was on the audit calendar and Bubble's compliance page couldn't produce the artifacts required.
We thought a rebuild would freeze the product for months. Feature parity landed in five weeks, and we passed SOC 2 the next quarter.
What we did
- Migrated Bubble app to Next.js + Node.js + PostgreSQL in 5 weeks.
- Ported every workflow to typed Server Actions with test coverage.
- Data migration with daily delta sync during parallel-run.
- Zero-downtime cutover.
- Delivered SOC 2 evidence artifacts inside the same engagement.
The numbers
- 4.2× faster page loads on their production traffic.
- $145,000 saved per year on platform + hosting fees.
- SOC 2 Type II passed 90 days after cutover.
- Zero user complaints during the parallel-run window.