Price calculations without exposing cost tables

To calculate prices without exposing cost tables, compute quotes on the server and send only safe outputs to the browser. I use simple patterns that keep margins private and still give fast, real-time quotes.

Plan your data boundaries

• List sensitive fields such as unit costs, supplier rates, discounts, and markup formulas.
• Store sensitive data only on the server in a protected database or service.
• Send the browser only option codes, labels, and limits. Never send costs or rules.
• Decide early which values are display only and which require server approval.

Build a server pricing endpoint

• Create an application programming interface, or API, that accepts a configuration with option ids, quantities, and dimensions.
• Validate all inputs server side and reject unknown or out of range values.
• Compute the bill of materials, or BOM, and the price in one server transaction.
• Return only what the UI needs: line descriptions, quantities, totals, and a quote id. Do not return raw costs or markups.

Keep 3D and CAD separate from pricing

• Run 3D viewers in the browser with geometry or images only, not cost or rule tables.
• Generate CAD, computer aided design, files and the BOM on the server from the same configuration.
• Use a configuration id to request assets. Do not expose per part price data to the viewer.

Block scraping and tampering

• Do not put cost tables in JavaScript, JSON, hidden fields, or local storage.
• Use allow lists for options and ranges and return clear errors for bad inputs.
• Rate limit pricing calls and monitor for unusual bursts or patterns.
• Issue quote ids that expire and recalculate on the server when reopened.

Cache and audit on the server

• Cache quotes by a configuration fingerprint, often called a hash, to speed repeat requests without exposing rules.
• Log the request, the pricing rule version, and the totals you returned.
• Version your pricing rules so staff can explain any quote later.

What to check when done

• View source and your browser network inspector show no cost or markup fields in any response.
• Editing a request in the browser cannot force a lower price.
• Invalid inputs return errors, not extreme or partial totals.
• 3D and CAD assets load without including any price data.
• A saved quote id reproduces the same totals after reload.

I build secure, server-side quoting configurators and portals under Custom Development > Applications, Business Systems & Portals, Custom Software Portals, Engineering Retainers, and Features & Add-ons, and Web Design & Development > Features & Add-ons. My Website quote configurator lets you pick features and tiers, see a live instant quote, and save or share it, and I can add AppWT Analytics to see which AI assistants lead to quotes and whether they convert.