Three Next.js apps share a core package and a single Claude-powered AI backend. Row-level security per firm. Editable prompt files. Every consequential action audit-logged.
From client intake to lender disbursement, every step is observable.
┌───────────┐ ┌──────────────┐ ┌─────────────┐ ┌────────────┐ ┌──────────┐
│ Client │───▶│ Firm Ops │───▶│ AI Layers │───▶│ Lender Pool│───▶│ Funded │
│ Intake │ │ Review │ │ (1 → 9) │ │ Bidding │ │ Retainer│
└───────────┘ └──────────────┘ └─────────────┘ └────────────┘ └──────────┘
│ │ │ │ │
▼ ▼ ▼ ▼ ▼
PIPEDA Conflicts Risk Tier A-D Best bid wins Trust acct
consent checked + AI explainer auto-awarded disbursed
│ │ │ │ │
└──────────────────┴───────────────────┴──────────────────┴────────────────┘
▼
┌──────────────────┐
│ Audit Log (L12) │ immutable, narrated
└──────────────────┘
Self-serve intake, retainer signing, payments.
Caseload, AI assessment, lender broadcast.
Packet review, bid, portfolio analytics.
Tenants, AI layers, audit oversight.
Each layer is a discrete Claude call with a versioned prompt. Layers chain into named flows.
Intake Interview
Conversational case capture.
Charge Classifier
Free text → Criminal Code section.
Credit Profile (mock)
Synthetic creditworthiness.
Risk Scoring
Composite tier A–D.
Lender Bid Simulator
Synthetic lender bids.
Retainer Draft
Drafts the engagement letter.
Client Explainer
Plain-language legal explanations.
Document Summarizer
Summarizes disclosure files.
Compliance Sentinel
Real-time policy guardrails.
Conflict Checker
Cross-tenant COI detection.
Portfolio Analytics
Lender risk + yield analysis.
Audit Narrator
Narrated audit timelines.
Tenant Health
Operational anomaly detection.
Client.intake → L01 → L02
↓
L09 (compliance)
↓
L03 → L04 → L10
↓
L05 (simulate bids)
↓
Firm.review → broadcast
↓
Lender.bid → L11 (yield)
↓
Firm.accept → L06 (draft)
↓
Client.sign → loan.disburse
↓
L12 (narrate)Next.js 14 App Router, Tailwind, shadcn/ui — 3 apps, 1 core package.
Supabase Postgres in ca-central-1. RLS on every tenant-scoped table.
Claude 3.7 Sonnet + Haiku via Anthropic API. Prompts versioned in repo.
OSFI-aware, PIPEDA consent capture, audit log immutability.
Vercel preview-per-PR. Migrations gated by review.
Per-firm row-level isolation. Service role keys never client-side.
Edge functions handle webhooks, signatures, idempotency.
Firms, lenders, and admin namespaces with strict boundaries.
Enter the platform as any role to walk the full flow.