Product · Shipped · 2026
Custom CRM In-house replacement for a licensed vendor platform.
Forensic teardown · architecture · build · audit
A full forensic teardown of a third-party admissions CRM (two portals, 8 admin sections, 35 screens, 14 modules), then a provider-agnostic rebuild on Next.js, PostgreSQL, Drizzle and Docker, hardened by a line-by-line security audit.
Replaced a licensed admissions CRM with an in-house, provider-agnostic platform. Documented every control and route before writing a line of code, then rebuilt, hardened and validated it.
- Automated checks
- 345
- Cross-tenant exposures closed
- all
- Next.js
- PostgreSQL
- Drizzle
- Docker
What I built.
Forensic teardown first.
Two portals, 8 admin sections, 35 screens, 14 modules, every control and API route documented before writing a line of code.
Provider-agnostic rebuild.
Next.js, PostgreSQL, Drizzle and Docker: 37 routes, a background job worker, and configurable pipelines, fields, role matrix, templates, attribution and automation controls.
Hardened by audit.
Closed cross-tenant write exposure on all lead actions, unscoped queries, record-scope enforcement and an overridable suppression control.
Validated.
345 automated checks across 8 suites, three consecutive clean runs and zero worker-job failures.
What changed.
- Routes delivered
- 37
- Automated checks
- 345
- Modules rebuilt
- 14
- Worker-job failures
- 0