Chinmay Bhat

Website and growth

• Led the complete migration of eximpe.com from WordPress to Vite to Next.js on my own, end to end, keeping search rankings with about 260 managed redirects.
• Designed and built both the frontend and the backend, for a smooth experience and an architecture that stays easy to maintain.
• Grew daily organic traffic from 10 to 15 visitors to about 2,000 with SEO-led content, comparison pages and four language editions.
• Built six free trade tools, including an HSN finder with about 19,000 programmatic pages generated from government tariff data.
• Built the lead pipeline behind 500+ qualified leads: validated forms, AES-256-GCM field encryption, sales alerts and a one-click follow-up.
• Made the site readable by AI answer engines with llms.txt, structured data on about 39 page types and a grounded Ask AI feature.

Compliance and security products

• Designed and built the EximPe Compliance Toolkit, which replaced Sprinto and ClickUp and runs the company's ISO 27001:2022 programme: 121 tables, 152 API endpoints, 162 production releases.
• Built EximPe DLP: a Swift macOS agent, a Chrome extension and an SMTP gateway sharing one detection engine with real checksums.
• Wrote the MCP server and Claude skills that let anyone at EximPe file a compliance request from a chat, with no ability to approve one.
• Set up the AWS infrastructure in Terraform: ECS Fargate, RDS, Cognito, S3 and SES, deployed from GitHub Actions with OIDC and no stored keys.

Audits and regulatory compliance

• Run audit readiness for PCI DSS v4.0.1 as a payment service provider, the RBI-mandated annual system and cyber security audit by CERT-In empanelled auditors, and ISO 27001:2022.
• Conduct EximPe's internal ISO 27001 audits myself, covering clauses 4 to 10 and the Annex A controls, and report the findings to management.
• Prepare the evidence and work alongside the assessors: quarterly ASV scans, VAPT, access reviews, policy reviews, DR drills and incident-response tests.
• Track EximPe's RBI Payment Aggregator (PA-CB) obligations, from quarterly InCA and OCA bank certificates to monthly cyber incident reports, in a compliance calendar I built.
• Close audit findings through corrective actions backed by proof, with every accepted risk approved by a named approver and given an end date.

IT and operations

• Run the company's Mac fleet on Jamf: enrolment, configuration profiles, FileVault, patching and self-healing agents.
• Manage endpoint security on Sophos and Google Workspace administration, including quarterly access reviews.

Marketing and automation

• Planned, designed and ran Google and Meta ad campaigns on controlled budgets, with ad creatives built in After Effects.
• Automated weekly news publishing with Relay.app, Make.com and Ghost CMS: an RSS trigger publishes every Tuesday with no manual work.
• Automated lead workflows with webhooks, homepage forms and email sequences, so every lead arrives CRM-ready.
• Ran design audits, content creation and marketing optimisation, keeping product, brand and growth aligned.

• Markenza, a Marathi influencer marketing agency: designed and built the full company site, a performance-optimised, SEO-ready platform, plus the blog backend the team publishes from.
• Media Vantage, a Mumbai entertainment company: a type-led site for celebrity campaigns and brand IP.
• Pyrelo, a work dashboard for Indian teams: product site, pricing, demo flow and a library of free tools.
• Triqio, an activewear label: e-commerce storefront with collections, product pages and a studio edit.

• Built and maintained features across Laravel, PHP, WordPress and Next.js.
• Worked on backend logic, CMS customisation and frontend performance optimisation.
• Collaborated with cross-functional teams to ship production-ready features on deadline.

• Built responsive user interfaces with React and Tailwind CSS.
• Translated UI and UX designs into high-quality, reusable frontend components.
• Improved the app's performance and consistency across devices.