AI Fleet Vetting & Onboarding App

Job Description
We are a growing fleet management startup based in Johannesburg, South Africa, looking for a skilled freelance developer to build a lean, high-performing web application featuring an integrated Agentic AI Conversational Layer.The goal of this platform is to automate two entirely separate business workflows via an intelligent AI assistant that routes users based on their initial selection:Driver Screening & Vetting: The AI must interview applicants, check qualifications (South African ID, PrDP status, driving experience), screen against our hiring criteria, and log qualified leads into a database.Investor Pitching & Onboarding: The AI must act as a 24/7 sales agent, answering questions about our fleet business model, ROI structures, and asset protection strategies using data strictly provided by our company prospectus.Development Approach PreferenceTo get to market quickly and minimize upfront costs, we prefer an AI-Assisted / Low-Code frontend framework (such as Bubble.io or FlutterFlow) seamlessly integrated with custom backend AI logic via APIs (such as OpenAI Assistants API or Anthropic Claude API). However, we are open to lightweight custom frameworks (e.g., Next.js + Supabase) if you can demonstrate a rapid, cost-effective deployment path.Key Responsibilities & DeliverablesBuild a clean, highly responsive, mobile-first web interface tailored for the South African market.Configure and embed an AI chatbot capable of context-aware, multi-step conversation routing.Establish data architecture (e.g., Supabase, Airtable, or native Bubble DB) to securely log driver applications and investor leads.Ensure strict adherence to data security standards to maintain POPIA compliance for sensitive user information.Connect third-party automated workflows (via Make.com or Zapier) to send follow-up onboarding emails or trigger documentation links.Required Technical SkillsProven experience with AI/LLM integration (OpenAI APIs, LangChain, or similar orchestration frameworks).Proficiency in Low-Code visual builders (Bubble, FlutterFlow) OR lightweight Full-Stack tech stacks (React/Next.js, Node.js/Python).Strong API integration skills (REST APIs, Webhooks, handling JSON data payloads).Basic understanding of data security and regional privacy compliance (POPIA/GDPR).Application InstructionsPlease submit your proposal with:A brief summary of your experience integrating AI APIs into web applications.Links or descriptions of 1–2 previous projects where you built conversational interfaces or custom lead-routing tools.Your recommended tech stack for our project and your estimated timeline to deliver a working MVP.If you'd like to draft a personalized outreach email to send alongside this job description to target developers via Gmail, please connect your account first: Connect Google WorkspaceWould you like me to:Outline a step-by-step interview questionnaire you can use to vet the freelance applicants who apply?Draft the legal POPIA compliance disclaimer text that your developer will need to display on the website's chat interface?You said: Outline the step-by-step data security measures a freelancer must implement to protect your investors' financial details under South African POPIA compliance?Outline the step-by-step data security measures a freelancer must implement to protect your investors' financial details under South African POPIA compliance?September 14, 2026To comply with South Africa’s Protection of Personal Information Act (POPIA), your freelance developer must build security into the platform from day one. Because you are handling sensitive financial data from investors and identifying information from drivers, a data breach could lead to severe legal and financial penalties from the Information Regulator.Here is the step-by-step checklist of data security measures your freelancer must implement:⚙️ Step 1: Encrypt Data Both "In Transit" and "At Rest"In Transit: Ensure the freelancer installs an SSL/TLS certificate (HTTPS). This guarantees that any information an investor types into the AI chat or onboarding form is encrypted while traveling from their browser to your server.At Rest: Any database used to store investor names, ID numbers, or financial capacities (such as Supabase, Xano, or Bubble's built-in database) must use AES-256 encryption. This ensures that even if the database is illegally accessed, the raw data remains unreadable. Step 2: Implement "PII Masking" Before Sending Data to AI APIsThe Risk: When investors chat with your AI, they might type sensitive details. Sending raw, identifiable financial data straight to external APIs (like OpenAI) can violate POPIA's cross-border data transfer rules if not managed carefully.The Fix: The freelancer must set up a backend script or middleware that automatically masks or sanitizes Personally Identifiable Information (PII). For example, if an investor types an ID or bank account number, the script should replace it with [REDACTED] before sending the text string to the AI model for context processing. Step 3: Enforce Strict Access Control & Role-Based PermissionsInternal Access: Your developer must implement Role-Based Access Control (RBAC) on your administration dashboard. Your operations staff should only see driver applications, while only executive leadership should have access to investor financial profiles.Authentication: Force Multi-Factor Authentication (MFA) for any admin or team member logging into the backend website portal. Step 4: Program Automatic Data Retention & Destruction PoliciesThe Law: POPIA states you cannot keep personal info longer than necessary to achieve the original purpose.The Fix: Have the developer build automated database triggers. For example:If a driver applicant is rejected, their data should be automatically deleted or anonymized after 30 days.If an investor inquiry goes cold and no contract is signed, their records should be automatically purged after 90 days. Step 5: Embed Explicit Consent Gateways into the AI InterfaceThe Law: You must obtain explicit, active consent before collecting or processing any personal information.The Fix: Before the AI chatbot opens or responds, the user must check an un-ticked box stating: "I consent to the processing of my personal information in accordance with the POPIA Privacy Policy." The developer must log the timestamp of this digital consent in the database. Freelancer Interview Vetting Tip