Modernizing a decade-old stadium suite-ordering platform for seven SEC, ACC, and SMU venues.

A decade-old platform doesn’t survive that long without being load-bearing. RevelXP’s suite-ordering experience is how donors and suite holders at seven major university programs order food, beverage, and hospitality for every game on the calendar. Football, basketball, baseball — multi-venue, multi-sport, with operational quirks that change school by school.

The legacy stack got us a long way. By 2026 we were running six school sites on our proprietary Caboose CMS, and the operational reality had moved well past what Caboose was built to do. Modern performance expectations, multi-tenant configurability, role-based access at the campus-manager level, Stripe Connect payments per school — all of it pointed at the same conclusion: time to migrate.

The platform is a true multi-tenant SaaS. Each school is its own tenant, but the underlying capabilities are shared — which means a fix or feature shipped once applies everywhere it’s needed, instead of being rebuilt seven times.

Per-venue config

Each venue maintains its own suite inventory, menu, ordering logic, and operational configuration. A school operating across multiple venues — Ford Stadium + Moody Coliseum, Davis Wade + Dudy Noble — without confusing the customer or the campus manager.

Custom labels

Suite-area labels are editable per venue. “Gator Dens” at Florida, “Blue Zone Suites” at UNC, “SkySuites” at Georgia, “Left Field Lofts” at Mississippi State. Branding is the school’s, not the platform’s.

Menu models

Complimentary-only, for-purchase-only, or hybrid — configurable per school. Some schools require a package; others bill optional items à la carte. All three patterns supported as first-class configurations, not workarounds.

Stripe Connect

Each paying school owns its own Stripe account. OAuth-scoped, school-controlled, school-paid-out. The platform connects with scoped permissions and never holds the merchant relationship — which matters for both compliance and trust.

Role-based access

Single-suite, multi-suite, multi-venue, and campus-manager roles. A suite holder with seats at Ford Stadium and Moody Coliseum gets one login. A campus manager gets venue-scoped admin access without seeing what they shouldn’t.

Self-serve admin

Campus managers add and edit customer accounts, suite assignments, menu items, and run reports themselves. No support ticket to change a price. Ticketed support exists for what actually needs it.

The new platform is built on Next.js + Sanity + Supabase + Vercel, with Stripe Connect for school-owned payments and the Anthropic API for the AI-enabled pieces that make the admin portal feel less like spreadsheet maintenance.

Every underlying provider in that stack maintains SOC 2 Type 2 certification. PCI scope is SAQ A — the lowest-risk merchant classification, the result of fully outsourcing card handling to Stripe. Daily backups with seven-day point-in-time recovery on the transactional database. Content fully versioned in Sanity. Disaster recovery measured in hours, not days.

None of that is glamorous, but it’s the infrastructure RevelXP’s cyber-insurance carrier and partner schools expect to see documented — and it’s why the platform-fee renewal conversation each year is short.

Migration began June 1, 2026. Go-live is staged across three windows in August, sequenced to give each campus manager team a clean training arc before suite holders start ordering for real:

Aug 5

Georgia Tech (Bobby Dodd Stadium) and Mississippi State (Davis Wade Stadium + Dudy Noble Field) live for suite-holder ordering.

Aug 10

UNC (Kenan Stadium) and Georgia (Sanford Stadium) live.

Aug 17

SMU (Gerald J. Ford Stadium + Moody Coliseum) and Florida (Ben Hill Griffin Stadium) live.

Three onboarding sessions across the campus-manager team cover platform basics, the complimentary-menu interface, and the for-purchase + payment-collection workflow. Sessions are recorded so a manager who joins midseason can catch up without scheduling a one-off.

The platform fee is annual. What renews with it isn’t a license — it’s an SLA. Target uptime is 99.9% measured monthly across all six school sites. P1 issues (site down, payments broken) get a two-business-hour response. Security patches at high or critical severity ship within 24–72 hours of disclosure. Actively exploited vulnerabilities ship immediately. Compliance documentation lands by August 1 every year — in time for cyber-insurance renewals and partner-school reviews.