Custom CRM
In-house replacement for a licensed vendor platform.
Forensic teardown · architecture · build · audit
// Stack
A full forensic teardown of a third-party admissions CRM — two portals, 8 admin sections, 35 screens, 14 modules — then a provider-agnostic rebuild on Next.js, PostgreSQL, Drizzle and Docker, hardened by a line-by-line security audit.
// The brief
Replaced a licensed admissions CRM with an in-house, provider-agnostic platform — documented every control and route before writing a line of code, then rebuilt, hardened and validated it.
Forensic teardown first.
Two portals, 8 admin sections, 35 screens, 14 modules, every control and API route documented — before writing a line of code.
Provider-agnostic rebuild.
Next.js, PostgreSQL, Drizzle and Docker — 37 routes, a background job worker, and configurable pipelines, fields, role matrix, templates, attribution and automation controls.
Hardened by audit.
Closed cross-tenant write exposure on all lead actions, unscoped queries, record-scope enforcement and an overridable suppression control.
Validated.
345 automated checks across 8 suites, three consecutive clean runs and zero worker-job failures.
Routes delivered
Automated checks
Modules rebuilt
Worker-job failures
Want something like this built?