BuildOrbit
All Projects

Yuki CRM

crm-roan-six.vercel.app
Yuki CRM passwordless sign-in screen with the Fresh Daylight workspace design

Passwordless Drive-style employee workspace for private files, controlled sharing, and auditable transfers.

A private internal CRM foundation centered on secure file work. Employees organise folders, upload large files directly to S3, manage versions, share internally or externally, create upload-only requests, search, recover deleted items, and work through the Fresh Daylight interface, using an approved or invited work email, with no password to leak.

Client delivery. The product was designed and engineered as studio work for the team that owns it.

ERP & SaaSSecure File WorkspacePrivate pilotWeb

The scale of what shipped.

Quick numbers to show the size, complexity, or scope of the system behind this case study.

2
Workspace Views
3
Delivery Paths
1
Append-only Audit
0
Public S3 Reads

How the project moved from constraint to launch.

A concise read of the challenge, the system we designed, and what changed once the product reached production.

01

The Challenge

The team needed a familiar file workspace without giving up private-by-default access, precise permissions, large-transfer reliability, revocation, auditability, and operational evidence required for an internal CRM foundation.

02

Our Approach

We built a modular Next.js workspace backed by Neon Postgres, Prisma, private S3 storage, and CloudFront delivery. The browser uses direct multipart transfers with grouped progress, while the application enforces email OTP identity, permission inheritance, signed delivery, external share policy, upload requests, lifecycle controls, append-only audits, quotas, and scheduled maintenance.

03

The Result

Phase 1 is a live passwordless workspace for files, folders, and transfers. List and grid views, internal and external sharing, upload-only requests, and append-only audit trails are in the product. This case does not claim live malware scanning or a completed production-acceptance rehearsal.

Across the platform.

Passwordless Sign-in

Workspace List

Workspace Grid

Workspace Controls

Secure Sharing

File Requests

What actually shipped.

Selected capabilities and system details that mattered in the final product, not a padded feature checklist.

Private-by-default hierarchical folder workspace

Direct and multipart S3 uploads with grouped progress and cancellation

Folder imports that preserve relative paths and empty directories

Internal permissions, external shares with expiry, password, and download limits

Upload-only file requests for collecting documents

File versions, recycle bin, search, stars, and storage quotas

Email OTP authentication with approved or invited work email

Append-only audit export, archive jobs, monitoring, and runbooks

Built with reliable production tooling.

The stack was chosen to fit the product constraints, not to chase trends. These are the technologies behind the shipped system.

Next.jsReactTypeScriptNeon PostgresPrismaAWS S3CloudFrontPostmarkSentryAWS CDKPlaywrightVitest

Building something with this level of complexity?

If you're planning a secure file workspace with real delivery constraints, we can help you scope it, make the technical calls early, and ship it properly.

Direct technical conversations before scope gets expensive.
Full-stack product delivery from interface to backend to launch.
Clear tradeoffs and execution plans instead of vague agency promises.