The real scope, without shortcuts.

Summary

Mine CRM AI is a multi-company SaaS application with a React frontend and FastAPI API. It covers the full sales cycle and adds contextual, limited and optional AI assistance.

Status

Functional local application, currently on hold.

Type

Founder-built project; no client claimed.

Demo

Loom video available ↗

Public code

The configured repository is not publicly accessible.

Architecture

Browser
React 19 · TypeScript · Vite · Tailwind
             ↓ HTTPS / JSON
FastAPI → services → repositories → SQLAlchemy
             ↓                         ↘
        PostgreSQL             OpenAI Responses API

The frontend keeps the access token in memory only. The API derives the company from the authenticated user and checks resources before any read, mutation or transfer of context to AI.

Sales cycle

Prospect → Client → Quote → Invoice → Payment
     ↘        ↘        ↘         ↘
        search, catalogue, reporting and copilot

• Prospect qualification and atomic conversion.
• Management of clients, products and fixed-fee or hourly services.
• Quotes with product or service lines and historical prices.
• One invoice per quote, due dates and partial or full payments.
• Dashboard and six- or twelve-month reports.

AI assistant and copilot

• Contextual questions about CRM data.
• Local client search without OpenAI cost.
• Email draft generation without automatic sending.
• Summary of available client history.
• Global copilot adapted to the active page and entity.
• Daily quotas, monthly budget and input, context and output limits.
• Sensitive actions remain proposals and are not executed silently.

Documented security

• Strict company isolation, including indirect resources and AI.
• Short-lived in-memory access JWT and rotating opaque refresh token in an HttpOnly cookie.
• CSRF protection through cookie/header double submit and origin checks.
• Persistent, revocable sessions with old refresh-token reuse detection.
• Argon2id passwords and gradual migration from older bcrypt hashes.
• Email verification, single-use recovery, attempt limits and security events.
• Backend-only secrets and OpenAPI documentation disabled in production.

Business API

The API, declared as version 1.0.0, exposes routes for authentication, companies, clients, prospects, products, services, quotes, invoices, payments, dashboards, reports and AI functions.

Contracts

UTF-8 JSON validated with Pydantic.

Persistence

SQLAlchemy 2, PostgreSQL and Alembic migrations.

Pagination

Bounded page sizes, search and server-approved sorting.

Health

Live and ready endpoints; ready checks PostgreSQL.

Verified elements

Codebase

FastAPI backend, React frontend, models, services, routes, tests and production configuration inspected.

Documentation

Architecture, API, security, development, deployment and user guides present.

Interface

Ten original screenshots supplied; five without contact details are published.

Video

A Loom link is available as an external demonstration.

Known limits

• The project runs locally; no public production deployment is claimed.
• Copilot memory remains in RAM and requires one worker until shared storage is introduced.
• Several amounts still use floating-point numbers; Numeric/Decimal is recommended before strict accounting requirements.
• The current model does not yet provide full RBAC for several employees in one company.
• The presence of tests is verified; this page does not claim the full suite was run for publication.
• Mine CRM is neither certified accounting software nor a vault for sensitive documents.