MVNE
Run a wholesale MVNE business on one set of infrastructure. Onboard new MVNO brands in days, isolate them at the policy layer, monetise them through one rated billing engine, and operate the whole portfolio from a single NOC — without the per-brand operational tax.
Many brands, one shared core
Tenant isolation enforced via an OPA/Rego policy engine evaluating (user, role, tenant_id, resource) tuples at both the Kong API gateway and inside each microservice. Per-tenant CDR streams, per-tenant rating tables, per-tenant dealer hierarchies — same hardware, no cross-tenant leakage.
Brand onboarding measured in days
TMF620 product catalogue and TMF622 ordering for plans and bundles, TMF641 service order for the activation chain, TMF629/632 for customer/party records. A new brand gets its catalogue, dealer portal, and self-care app behind branded entitlements without forking the platform.
Operational economics that compound
One 24/7 NOC, one observability stack (Grafana / Prometheus / Zabbix on OP+MISC), one security posture (Istio Ambient mTLS, SPIFFE identities, Vault PKI with 24h cert TTL). Add the Nth brand and your operating cost moves a fraction of what an Nth standalone deployment would.
