Foreign workers for local employers: passports, visas, permits, contracts. Everything in spreadsheets; expiries missed; files scattered; two people overwriting each other.

Four document types with expiry rules; placement history; who may see and change what; the system must run in the office with nothing exposed to the internet.

Single-tenant template: the same code installed per client, branded by a first-run wizard; a five-state expiry rule with a configurable threshold; pessimistic locking; an audit diff on every change.

Backend with hand-written migrations, real-time invalidation and locks, files per worker, spreadsheet exports, an admin backups page, a one-script installer, one-command update, guarded rollback.

Office network; nightly backups; email.

Expiry alerts on the dashboard; a record of who changed what.

Running on the client's office network under their brand. Still in development; the list of what's missing is kept next to the code.