Full-Stack Developer – Multi-Tenant Client Management Web App (React/PWA)
Budget / Salary$250–750
TypeFreelance project
LocationRemote
Posted3 hours ago
Full-Stack Developer – Multi-Tenant Client Management Web App (React/PWA)
We are looking for an experienced full-stack developer to complete an existing React/TypeScript web application.
The responsive frontend already exists, including PWA installation, a service worker and an offline fallback page.
Currently, there is no backend, database or authentication. Data is stored locally in the browser.
Our goal is a secure, functional multi-tenant client management application for an initial 60-day pilot.
1. AUTHENTICATION
- Email/password registration and login
- Secure password hashing (Argon2, bcrypt or PBKDF2)
- Persistent user sessions
- Login and logout across devices
2. MULTI-TENANT ARCHITECTURE
- Support multiple independent firms
- Strict separation of all firm data
- Server-side authorization for every request
- Users must never access another firm's records
3. USER MANAGEMENT
- Automatic Admin account when registering a firm
- Two roles: Admin and Member
- Admin can invite additional users by email
- Appropriate role-based permissions
4. CLIENT MANAGEMENT
- Create, edit, view, search and delete clients
- Fields: name, company, email, phone, address, notes, tags and status
- Search by client name or company
5. CLIENT NOTES & HISTORY
- Add dated notes to client profiles
- Display author and timestamp
- Shared history accessible to authorized firm users
6. PWA & DATA SYNCHRONIZATION
- Maintain the existing React/TypeScript frontend
- Responsive mobile and desktop functionality
- Synchronize data through the backend
- Access the same records from different devices
7. AUDIT LOGGING
- Record client creation, updates and deletion
- Store user, action, record and timestamp
- Admins can review audit history
8. DEPLOYMENT & SECURITY
- Live HTTPS deployment
- Secure environment variables
- Basic production security measures
- Daily database backups
- Australian hosting/database region preferred
OUT OF SCOPE
Billing, subscriptions, TOTP, SSO, device fingerprinting, real-time location tracking, push notifications, public APIs, offline write queues and native mobile applications.
ACCEPTANCE TESTS
The developer must demonstrate:
1. Register a new firm with an Admin account.
2. Create a client with all required fields.
3. Add a note with correct author and timestamp.
4. Search clients by name or company.
5. Log in from another device and access the same data.
6. Invite a Member who can access the firm's clients.
7. Register a second firm and demonstrate complete data isolation.
8. Delete a client and verify the deletion in the audit log.
DELIVERABLES
- Fully functional application deployed via HTTPS
- Complete source code in a client-owned Git repository
- README with installation and deployment instructions
- Hosting and database accounts under client ownership
- Daily database backup configuration
- Documentation of authentication, password security and tenant isolation
OWNERSHIP & CONFIDENTIALITY
All custom development and project deliverables belong exclusively to the client.
The developer must sign a confidentiality agreement before receiving the complete existing frontend files.
Project code must not be reused, resold or shared with third parties.
MILESTONES
Milestone 1:
Backend setup, authentication, firm registration and user management.
Milestone 2:
Client management, notes, search and activity history.
Milestone 3:
Data synchronization, audit logging, deployment, testing and final handover.
BUDGET: MAXIMUM €400 FIXED PRICE
We understand that the budget is limited.
If the complete scope cannot be delivered within €400, please provide a separate fixed-price proposal for a smaller MVP covering:
- Authentication
- Secure multi-tenant firm isolation
- Client management
- Client notes
- Basic HTTPS deployment
User invitations, audit logging and additional functionality may be quoted separately as Phase 2.
YOUR PROPOSAL MUST INCLUDE
1. Links to similar full-stack applications.
2. Recommended technology stack.
3. Explanation of authentication and tenant isolation.
4. Fixed-price quotation and milestones.
5. Realistic estimated development timeline.
6. Earliest available start date.
No fixed completion date has been established. The 60 days refer to the pilot operation period.
We are looking for a practical, reliable developer who can deliver a secure and maintainable solution without unnecessary complexity.
All communication and payments must remain on Freelancer.com.
We are looking for an experienced full-stack developer to complete an existing React/TypeScript web application.
The responsive frontend already exists, including PWA installation, a service worker and an offline fallback page.
Currently, there is no backend, database or authentication. Data is stored locally in the browser.
Our goal is a secure, functional multi-tenant client management application for an initial 60-day pilot.
1. AUTHENTICATION
- Email/password registration and login
- Secure password hashing (Argon2, bcrypt or PBKDF2)
- Persistent user sessions
- Login and logout across devices
2. MULTI-TENANT ARCHITECTURE
- Support multiple independent firms
- Strict separation of all firm data
- Server-side authorization for every request
- Users must never access another firm's records
3. USER MANAGEMENT
- Automatic Admin account when registering a firm
- Two roles: Admin and Member
- Admin can invite additional users by email
- Appropriate role-based permissions
4. CLIENT MANAGEMENT
- Create, edit, view, search and delete clients
- Fields: name, company, email, phone, address, notes, tags and status
- Search by client name or company
5. CLIENT NOTES & HISTORY
- Add dated notes to client profiles
- Display author and timestamp
- Shared history accessible to authorized firm users
6. PWA & DATA SYNCHRONIZATION
- Maintain the existing React/TypeScript frontend
- Responsive mobile and desktop functionality
- Synchronize data through the backend
- Access the same records from different devices
7. AUDIT LOGGING
- Record client creation, updates and deletion
- Store user, action, record and timestamp
- Admins can review audit history
8. DEPLOYMENT & SECURITY
- Live HTTPS deployment
- Secure environment variables
- Basic production security measures
- Daily database backups
- Australian hosting/database region preferred
OUT OF SCOPE
Billing, subscriptions, TOTP, SSO, device fingerprinting, real-time location tracking, push notifications, public APIs, offline write queues and native mobile applications.
ACCEPTANCE TESTS
The developer must demonstrate:
1. Register a new firm with an Admin account.
2. Create a client with all required fields.
3. Add a note with correct author and timestamp.
4. Search clients by name or company.
5. Log in from another device and access the same data.
6. Invite a Member who can access the firm's clients.
7. Register a second firm and demonstrate complete data isolation.
8. Delete a client and verify the deletion in the audit log.
DELIVERABLES
- Fully functional application deployed via HTTPS
- Complete source code in a client-owned Git repository
- README with installation and deployment instructions
- Hosting and database accounts under client ownership
- Daily database backup configuration
- Documentation of authentication, password security and tenant isolation
OWNERSHIP & CONFIDENTIALITY
All custom development and project deliverables belong exclusively to the client.
The developer must sign a confidentiality agreement before receiving the complete existing frontend files.
Project code must not be reused, resold or shared with third parties.
MILESTONES
Milestone 1:
Backend setup, authentication, firm registration and user management.
Milestone 2:
Client management, notes, search and activity history.
Milestone 3:
Data synchronization, audit logging, deployment, testing and final handover.
BUDGET: MAXIMUM €400 FIXED PRICE
We understand that the budget is limited.
If the complete scope cannot be delivered within €400, please provide a separate fixed-price proposal for a smaller MVP covering:
- Authentication
- Secure multi-tenant firm isolation
- Client management
- Client notes
- Basic HTTPS deployment
User invitations, audit logging and additional functionality may be quoted separately as Phase 2.
YOUR PROPOSAL MUST INCLUDE
1. Links to similar full-stack applications.
2. Recommended technology stack.
3. Explanation of authentication and tenant isolation.
4. Fixed-price quotation and milestones.
5. Realistic estimated development timeline.
6. Earliest available start date.
No fixed completion date has been established. The 60 days refer to the pilot operation period.
We are looking for a practical, reliable developer who can deliver a secure and maintainable solution without unnecessary complexity.
All communication and payments must remain on Freelancer.com.
Apply on Freelancer →
Project sourced from Freelancer.com. Applications happen directly on the original platform — we never collect your data.