C2C Group: A Bubble Member Platform for a Compliance Subscription

C2C Group is a UK compliance and training consultancy for construction companies, covering health and safety, HR, ISO certification and apprenticeships. They were growing, and they wanted to package that expertise as a recurring subscription: the C2C Partnership, sold in four tiers called Protect, Progress, Perform and Pinnacle.

What they needed was a member app to deliver it. A member had to be able to buy, get an account, and reach the content they'd paid for, with 404 items of guidance, templates and training across 45 sections waiting behind the login.

The harder part was how members arrive. Some buy by card. Others start with a trial at a convention stand, or are sold by a consultant, and neither of those touches a card payment at all. Pinnacle is priced deal by deal, so the amount someone paid couldn't be what decided what they could see. Every route in had to end in the same place: an account, the right tier and a welcome email, without anyone setting members up by hand.

Security carried more weight than usual. Compliance is the service C2C sell, and the platform would hold data on behalf of their clients' businesses. Each company's data had to be kept separate in a way that could be shown, not just intended.

We built the member app in Bubble, along with the infrastructure behind it, and connected GoHighLevel and Stripe so the whole journey runs without hand-offs. The app covers the content library, the section structure, a member dashboard, in-app video, account settings, and the back-office screens C2C staff run it from.

• One job per platform: GoHighLevel holds the person, the Bubble app holds access and activity, and Stripe holds the money and never touches the app. We added no extra middleware between them.
• Everything starts from a tag in the CRM, not a payment: That's what lets card buyers, convention trials and consultant-led sales behave identically. Five named connections join the systems: set up the member, confirm back and send the welcome email, report completed content, report a tier change made by staff, and set what a member can access.
• Access is one rule, applied everywhere: Is the item published, and does this member's tier include it. The tier comes from the Stripe product rather than the amount paid, so per-deal pricing can't break it.
• Each company's data is kept apart in the database itself: We wrote 60 privacy rules across 12 live data types in Bubble, with staff access carved out of the member rules rather than added on afterwards.
• Built to fail safely: If a new member's account doesn't finish setting up, an alert goes to a named person within ten minutes, so a paying member is never left stranded, and a stuck member can be set up again without a developer.

The CRM went from no custom fields to 13 built for this, 15 automation workflows are live, and five Stripe webhook endpoints are taking payments. Security rules sit in the database rather than in the screens, which matters for a business whose clients trust them with their compliance.