IQ Education :

See how we took over an application trapped inside a third-party tool and made the client 100% owner of it, without ever interrupting service.

Migration
Dedicated infrastructure
Security
GDPR

Client: IQ Education
Sector: EdTech / Training
Deliverables: Web application takeover, hardening and migration
Delivery date: March 2026
Expertise involved: web development, DevOps / infrastructure, security & compliance

IQ Education had an application built quickly on a third-party platform. Effective to get started, but a trap in the medium term: impossible to evolve freely.

The problem was not the product, but the dependency: no access to the source code, no control over hosting, and a permanent risk of data loss. Limits invisible day to day, but blocking as soon as you consider growing the tool.

The stake for IQ Education? Moving from total platform dependency to full autonomy: taking back control of their own product.

The real challenge? Taking over the existing system without ever interrupting access to the app.

Migrating an application already in production is delicate. Users had to keep working while, in the background, we rebuilt the foundations. No downtime, no data loss tolerated.

On top of that came the concerns specific to an EdTech player: securing sensitive data, guaranteeing GDPR compliance, and laying a sound foundation on which new features could finally be built. In short, turning a shaky app into an everyday one.

1.Audit and hardening of the existing system
We started by securing the ground: putting the data out of harm's way and setting up automated backups. Enough to remove the risk of loss immediately, before launching any migration.
2.Migration to dedicated infrastructure
We then carried out a complete takeover of the existing system with no service interruption, migrating to dedicated infrastructure. The client regains full control: source code, access, hosting.
3.Compliance and preparing for the future
Finally, we brought the application up to the expected level: secured, GDPR compliant, and built on a sound foundation ready to host the new features the third-party platform made impossible.

Weekly sync meetings

Every week, a checkpoint let us validate progress, adjust priorities and secure each phase of the takeover.

A gradual, controlled takeover

Rather than a hard cutover, we moved through verified stages, checking at every step that the service stayed available and the data intact.

Continuous test environments

As the migration progressed, we gave the client staging environments. Every step could be validated in real conditions before being applied, so we could move forward without risk.

The client stays in full control at every step and watches the takeover progress in real time: no tunnel, no bad surprise, no downtime.

To take over the application and make it fully autonomous, secure and scalable, we brought in several building blocks:

Front-endin the browser, no install: Phaser (2D map), Svelte (interface), LiveKit (video calls), Matrix (chat)
Back-endNode.js / TypeScript, split into small services (connections, maps, files) synced in real time
DatabaseRedis (live room state), maps stored as files on the server or in cloud storage
User accountsexternal service or company directory via SSO
Infrastructurehosting on dedicated infrastructure
Securityautomated backups, GDPR compliance