System Module Architecture

10 Core Modules with Business Entity Mapping

Authentication & Accounts

Auth, sessions, OAuth

Core Capabilities:

Secure Sign-In
Session Lifecycles
OAuth Integrations
Email Verification

Organization & Membership

Teams, roles, invitations

Core Capabilities:

Tenant Scoping
Role Permissions
Team Invitations

Notifications & Preferences

User notifications

Core Capabilities:

User Alerts
Reminder Rules
Preferences Dashboard

Ownership Transfer

Organization ownership

Core Capabilities:

Secure Delegation
Transfer Keys
Approval Logs

Security & Audit

Audit logs, tracking

Core Capabilities:

Activity Monitoring
IP & Device Logs
Compliance Auditing

Client Management

Client records

Core Capabilities:

Client Profiles
Contact Details
Engagement Tracking

Tender Management

Dynamic statuses (open, closed, evaluation, awarded, lost) & auto-project creation

Core Capabilities:

Bid Trackers
Timeline Extensions
Automatic Closing Date Statuses

Project Management

Auto-created projects, details editor, purchase orders

Core Capabilities:

Auto-created Projects
Timeline Editors
Purchase Orders

Support & Feedback

User support & feedback

Core Capabilities:

Support Ticketing
User Feedback Channels
Administrative Tools

Document Management

Centralized file storage

Core Capabilities:

Presigned Secure Access
Cloudflare R2 Isolation
Centralized Spec Storage

Module Relationships

Core Relationships:

Auth → Organization (Users belong to orgs)
Organization → All Business Modules (Org-scoped data)
Client → Tender (Clients have tenders)
Tender → Project (Tenders become projects)
Project → Purchase Orders (Projects have POs)

Cross-cutting Concerns:

Notifications monitors all modules
Security & Audit logs all actions
Ownership Transfer manages org transitions
Documents linked to Tender, Project, PO, & Extensions

Implementation Notes

  • ✓Soft Deletion: Client, Tender, Project, Purchase Order, Follow-up support soft deletion
  • ✓Multi-tenancy: All business data is organization-scoped
  • ✓Role-based Access: Owner, Admin, Manager, Member roles supported
  • ✓Audit Trail: Security audit log tracks all sensitive operations
  • ✓Session Management: Comprehensive session tracking with suspicious activity detection
  • ✓Tendering Pipeline: Automated closing-date checks, evaluation lockdowns, and instant project auto-generation upon bid award