The all-in-one lead-to-revenue platform you can brand and resell.
Capture leads from 19 sources, qualify with AI, route through visual pipelines, automate engagement, charge in 5 currencies – every workspace white-labeled, GDPR-ready and yours.

Multi-tenant SaaS architecture
19 lead sources – Facebook, Google Ads, TikTok, LinkedIn, WhatsApp, IMAP, Calendly + more
AI Lead Coach with next-best-action suggestions, draft replies & score reasoning
Visual Kanban pipelines with custom stages, value tracking, win/loss reasons
5 payment gateways – Stripe, PayPal, Razorpay, Paystack, Manual bank transfer
DFY marketplace with one-click install for automations, sequences, forms & pipelines
GDPR-grade compliance – DPA template, Article 17 erasure, Article 20 export, audit logs
Web-based installer & updater (no Composer, no SSH, no CLI)

Stop chasing leads. Start owning your pipeline.

LeadHub is a self-hosted, multi-tenant SaaS CRM that lets you ingest leads from 19 channels, qualify them with built-in scoring and AI coaching, route them through visual pipelines, engage with email sequences and SMS, and convert them through a tax-compliant billing engine – all from one branded dashboard your customers can log into.

Built on Laravel 13 with a polished Filament 4 admin, Livewire 3 reactivity and Tailwind CSS, LeadHub is designed to be sold as a service (SaaS) or used internally. Each tenant gets their own white-labeled dashboard, branded landing pages, public booking calendar and team workspace. You control everything from a powerful super-admin panel – plans, gateways, tenants, coupons, tax rates, audit logs and more.

AI features powered by your favorite LLM provider take your sales workflow to the next level: per-lead next-best-action suggestions, draft reply generation, score-reasoning explainers and at-risk-lead surfacing – all optional, all plan-gated, all working alongside a fully functional CRM that runs perfectly without any AI keys.

⚡ Core Features at a Glance

✅ 19 Lead Sources – Facebook, Instagram, TikTok, LinkedIn, WhatsApp, Viber, Telegram, X/Twitter, Snapchat, Pinterest, Google Ads, YouTube, Microsoft Ads, IMAP, Typeform, JotForm, Calendly, Web Form & Email forwarding
✅ Visual Kanban Pipelines – Drag-and-drop stages, value tracking, win/loss reasons, multiple pipelines per tenant
✅ Lead Scoring Engine – Rule-based scoring with field, behavior & engagement triggers
✅ Duplicate Detection – Configurable email/phone matching with merge workflow
✅ Email Sequences – Drip campaigns with delays, conditions, stop-on-reply & engagement tracking
✅ Forms & Landing Pages – Block-based builder, embeddable JavaScript widget, branded thank-you redirects
✅ Marketing Automations – Trigger → condition → action workflows with round-robin assignment
✅ Calendar 2-Way Sync – Google Calendar & Microsoft Outlook with public booking pages
✅ AI Lead Coach – Per-lead next-best-action, draft replies, score-reasoning explainers
✅ Customer Health Scoring – Identify at-risk leads before they go cold
✅ Public Booking Pages – Round-robin team assignment with buffer time & availability rules
✅ REST API + Webhooks – Scoped API keys, replay-safe signed webhooks, full delivery logs
✅ Multi-Tenant SaaS – Sell unlimited workspaces
✅ 5 Payment Gateways – Stripe, PayPal, Razorpay, Paystack, Manual bank transfer
✅ Affiliate Engine – Recurring 20% commissions, payout tracking, audit trail
✅ DFY Marketplace – Pre-built automations, sequences, forms & pipelines (one-click install)
✅ GDPR Compliance Suite – DPA template, cookie banner, Article 17 erasure, Article 20 export
✅ Tax-Compliant Receipts – Sequential numbering, EU VAT, US sales tax, multi-currency
✅ Web-Based Installer – Browser-driven setup, no command line, no Composer
✅ Shared Hosting Support – Works on cPanel out of the box, no SSH or queue worker required

Multi-Tenant SaaS Architecture

LeadHub is built from the ground up as a multi-tenant SaaS platform. Each tenant (your customer) gets:

A full-featured tenant dashboard with leads, pipelines, automations, sequences, forms, calendar & team management
White-labeled branding – primary color, accent color, logo, favicon, app name, footer text – all per-tenant
Isolated data – query-level tenant isolation; tenants never see each other’s leads, deals or settings
Role-based access – tenant owner, admin, staff & viewer roles with granular permissions
Public-facing surfaces – landing pages, forms, booking calendar & team contact pages

As the platform owner, you manage everything from the super-admin panel: create plans, set per-plan feature gates and usage limits, manage tenants, configure all 5 payment gateways, monitor revenue, view audit logs & backups. You can impersonate any tenant in one click (60-minute audited sessions) to troubleshoot issues without ever asking for their password.

Lead Capture – 19 Sources, Every Channel

LeadHub gives you nineteen ways to ingest leads automatically – no Zapier, no glue code:

Social & Ads – Facebook Lead Ads, Instagram, TikTok, LinkedIn, X/Twitter, Snapchat, Pinterest
Messaging – WhatsApp, Viber, Telegram
Paid Search – Google Ads, YouTube, Microsoft Ads
Inbox & Forms – IMAP email parsing, Typeform, JotForm, Calendly bookings, Web Forms
Embeddable Widget – A lightweight JavaScript snippet that drops a branded form button onto any website with a single script tag
REST API + Webhooks – Scoped API keys for inbound posts, replay-safe HMAC-signed outbound webhooks
Public Forms – Multi-step shareable links, multi-language (English, Spanish, Arabic, Hindi) and reCAPTCHA-protected
Manual Entry – Bulk CSV import, copy-paste lead bulk add, manual single-lead form

Every captured lead is enriched with full context: source, campaign, UTM tags, assigned user, pipeline stage, score, custom fields and a complete activity timeline. Your team can reply, change stages, log calls, schedule meetings and apply tags – all from one filterable dashboard.

AI-Powered Intelligence – LLM Built In

LeadHub integrates directly with your favorite LLM provider to supercharge your sales workflow:

AI Lead Coach – Per-lead next-best-action suggestions: when to call, when to email, what to say, when to drop
Draft Reply Generation – One-click AI-drafted replies based on the lead’s full activity history. Edit and send in seconds
Score Reasoning – AI explains in plain English why a lead scored 87 instead of 62 – surfacing the rules that fired
At-Risk Detection – Identify leads going cold based on engagement decay, missed touchpoints & sentiment shifts
Smart Tags – AI suggests relevant tags from lead content, saving manual categorization across thousands of records
Subject Line Optimizer – Generate & A/B-test subject line variants for every email sequence step

AI features are optional and plan-gated – you can enable or disable them per subscription plan. Tenants on plans without AI still get a fully functional CRM with manual scoring, manual tagging and manual sequence building.

Pipelines, Automations & Engagement

Every tenant gets a powerful visual pipeline workspace for moving leads through their sales process:

Visual Kanban Pipelines – Drag-and-drop stages with custom names, colors, deal value tracking and probability percentages
Multi-Pipeline Support – Create unlimited pipelines per tenant (sales, support, onboarding, recruiting)
Win/Loss Reasoning – Configurable reason lists captured at close so you can analyse churn drivers later
Lead Scoring Engine – Rule-based scoring with field, behavior & engagement triggers
Duplicate Detection – Configurable email/phone fuzzy matching with merge workflow that preserves activity history
Email Sequences – Drip campaigns with delays, conditions, stop-on-reply, stop-on-won and engagement tracking (opens, clicks, replies)
Marketing Automations – Trigger → condition → action workflows: round-robin assignment, lead scoring, SMS, webhooks, slack notifications
Calendar 2-Way Sync – Google Calendar & Microsoft Outlook with conflict detection, buffer time and availability rules

Public Surfaces – Landing Pages, Forms & Booking

Each tenant gets a suite of public-facing pages, accessible without login:

Public Landing Pages

Drag-and-drop landing-page builder with reusable blocks (hero, features, pricing, FAQ, testimonials, CTA forms). Every page is SEO-ready with editable meta tags, OG image and JSON-LD schema. Multi-language out of the box (English, Spanish, Arabic, Hindi).

Public Forms

Shareable form links, embeddable JavaScript widget & QR-code generation. Multi-step forms with conditional logic, file uploads and reCAPTCHA. Branded thank-you pages with optional URL redirect.

Public Booking Calendar

Customer-facing scheduling page with team round-robin, individual links, buffer time, availability rules and Google/Microsoft sync. Bookings auto-create leads, send reminder emails and schedule SMS notifications.

White-Label Tenant Portals

Each tenant’s dashboard renders with their own logo, brand colors, app name, favicon & footer text – your platform brand never leaks through. Optional dark mode across the whole admin.

Billing & Monetization – Five Gateways, Sell on Day One

LeadHub includes a complete multi-gateway billing engine so you can start charging tenants the moment you launch:

Stripe Integration – Hosted Checkout, Customer Portal, recurring subscriptions, webhook idempotency, refunds & credit-note receipts
PayPal Integration – Billing-subscriptions API with signed-webhook verification & out-of-order event ordering guard
Razorpay Integration – Subscriptions API for the Indian market with hosted checkout
Paystack Integration – Sub-Saharan Africa coverage with hosted checkout & subscription support
Manual Bank Transfer – Wire-transfer flow with super-admin confirmation and configurable bank-detail templating
Flexible Plans – Unlimited plans with monthly & annual pricing, feature gates, usage limits and seat caps
Plan Feature Gates – Control access per plan: lead sources, AI Lead Coach, marketplace installs, white-label, custom domain, API, webhook quota, team seats
Coupon System – Percentage and fixed-amount discounts, trial extensions, usage limits, date ranges, plan restrictions
Tax-Compliant Receipts – Sequential numbering (LH-YYYY-NNNNNN), EU VAT, US sales tax, multi-currency, GDPR Article 17.3.b retention
Refund Credit Notes – Negative receipts auto-generated on refund for clean year-end accounting
Annual Billing – Monthly/annual toggle with operator-configurable discount per plan
Trial Periods – Configurable free trial with automatic expiry, dunning emails & upgrade prompts
Affiliate Engine – Referral codes, recurring 20% commission tracking, payout audit trail
Per-Tenant Currency – Each tenant operates in their own currency for receipts & reporting
VAT & Billing Details – Tenant-side capture of business name, VAT/GST id, billing address, billing email & country

Super-Admin Panel – Full Platform Control

The super-admin panel gives you complete control over your SaaS platform:

Platform Dashboard – Total tenants, active subscriptions, MRR/ARR, churn rate, recent activity, lead-source mix
Tenant Management – Create, view, suspend, activate, restore & hard-delete tenants. Process refunds directly
Plan Builder – Create & reorder plans with granular feature gates and usage limits per resource
Coupon Management – Create promotional codes with percentage/fixed discounts, trial extensions, usage caps & expiry
Multi-Gateway Settings – Configure Stripe, PayPal, Razorpay, Paystack & Manual bank-transfer credentials in one place
Tax Rate Configuration – Per-country/region tax rates with EU VAT MOSS & US sales-tax support
Platform Settings – SMTP, branding, landing-page builder, email templates & integrations from the browser
Tenant Impersonation – One-click login as any tenant (60-minute audited sessions, full audit trail)
Affiliate Payout Tracking – Pending commissions, paid commissions, payout audit log per affiliate
DFY Templates Library – Curate marketplace templates and feature-gate them per plan
Audit Logs – Complete trail of every action taken by admins and tenants (180-day retention, configurable)
Database Backups – Create, verify & download backups directly from the browser
Webhook Delivery Logs – Monitor outbound webhook deliveries, failures & retries across all tenants
SA IP Allowlist – Lock the super-admin panel down to specific IPs/CIDR ranges with optional strict mode

Security & Authentication

LeadHub takes security seriously with enterprise-grade protections built in:

Two-Factor Authentication (2FA) – TOTP-based 2FA with QR code setup, recovery codes & per-role enforcement
Atomic Brute-Force Lockout – Cache-based 15-minute counter with safe-under-burst-load semantics
Trusted Proxy Configuration – Proper Cloudflare/Nginx-aware IP resolution with safe defaults
Super-Admin IP Allowlist – Optional strict mode requiring TCP-peer match in addition to forwarded IP
Encrypted Webhook Secrets – All outbound webhook secrets encrypted at rest with APP_KEY
Replay-Safe Signed Webhooks – Stripe-style timestamp + HMAC signature with consumer-tolerance validation
Tenant Data Isolation – Query-level scoping prevents cross-tenant data exposure
Role-Based Access Control – Six roles: super-admin, tenant owner, tenant admin, staff, viewer, customer
Scoped API Keys – Granular read/write permissions per resource with per-key rate limits
Strong Password Policy – Enforced minimum length, complexity, breach-database check on signup
CSRF, XSS & SQL-Injection Protection – Full Laravel security stack with Eloquent parameterization
Audit Trail – Every admin and tenant action logged with timestamp, actor & IP
Session Lockout – Configurable session lifetime with idle-timeout enforcement
Email Domain Verification – DNS TXT-record challenge prevents spoofed sender addresses

LeadHub is built for developers, agencies and product owners who need to plug it into their existing tools:

REST API

A complete RESTful API with endpoints for leads, pipelines, deals, forms, automations, sequences and webhooks. Authenticated via scoped API keys with per-tenant rate limiting (60 requests/minute default, configurable per plan). Interactive API documentation is built into every tenant dashboard.

Outbound Webhooks

Configure webhooks to receive real-time notifications when events happen: lead.created, lead.stage_changed, deal.won, form.submitted, automation.triggered. Replay-safe HMAC signatures, encrypted secrets at rest, full delivery logs with retry tracking and dead-letter alerts. Drop-in compatible with Slack, Discord, Zapier and any custom endpoint.

A single JavaScript snippet drops a lead-capture form onto any website. The widget automatically matches the tenant’s brand colors and submits to the LeadHub backend cross-origin. Multi-step support, file uploads, reCAPTCHA-protected.

Email System – Automated Communication

LeadHub sends 15+ types of automated emails to keep tenants and their leads informed:

Onboarding Email Sequence – Welcome series (Day 0, Day 2, Day 5, Day 10) to guide new tenants through setup
Trial Drip Campaign – Behavior-based emails through the 14-day trial with localized subjects (4 languages)
Lead Sequences – Tenant-defined drip campaigns with stop-on-reply, stop-on-won & engagement tracking
Booking Confirmations – Auto-sent when public-calendar bookings happen, with .ics calendar attachments
Booking Reminders – 24-hour and 1-hour reminder emails before scheduled meetings
Deal Won Notifications – Internal team alerts when a lead converts
Plan Limit Alerts – Tenant warnings when they approach lead/seat/storage caps
Dunning Emails – Escalating payment-failure reminders with eventual subscription suspension
Trial Expiry Notices – Prompt tenants to subscribe before their trial ends
Team Invitations – Signed invite links for adding team members with role pre-assignment
Password Reset – Sync-driver delivery (works on shared hosting without queue worker)
Affiliate Commission Notifications – Monthly summaries to referrers
GDPR Erasure Confirmations – Cool-off period reminder during the 30-day window
Workspace Deletion Warnings – Final notice before the scheduled hard-delete fires

SMTP is configured through the admin panel with a built-in test email feature. Slack & Discord webhook delivery available as alternatives for transactional alerts.

Team Collaboration

Each tenant can invite team members to collaborate on lead management:

Team Invitations – Invite via email with signed, single-use, expiring links
Role Assignment – Owner, admin, staff & viewer roles with different permission levels
Plan-Limited Seats – Control team-size cap per plan with a friendly “upgrade to add more” prompt
Shared Pipelines – All team members see the same dashboard with permission-based visibility
Lead Assignment – Manual assignment, round-robin or load-balanced auto-assignment
Activity Notifications – In-app notification panel with unread counters & email digest
Per-User Audit Log – See exactly who did what and when, scoped to the tenant

Infrastructure – Install Anywhere, No DevOps

LeadHub is designed to run on any hosting environment, including shared cPanel:

Web-Based Installer – Browser-driven setup wizard. No command line, no SSH, no Composer. Upload, visit the URL, follow the steps
Layout Auto-Detection – Works in proper public/-as-webroot setups, naive uploads & flat installs alike
Requirements Checker – Verifies PHP version, extensions and folder permissions before installation
Web-Based Updater – Run database migrations and clear caches from your browser. No SSH needed for updates
Database Backups – Create, verify & download backups directly from the admin panel
Shared Hosting Cron – URL-based scheduler trigger works with cPanel cron without CLI scheduler
Sync Mail Driver – Optional sync-driven email delivery for hosts where queue workers can’t run
Storage Fallback – Serves uploaded files without symlinks for shared hosting where symlinks are disabled
SEO Ready – Dynamic sitemap.xml, robots.txt and per-tenant og:image generation
Health Check Endpoint – Real DB + cache + storage probe with 200/503 status response
Audit Log Retention – Configurable 180-day rolling window with nightly purge command
Login Attempt Retention – 30-day forensic window for brute-force investigation

Customization & Branding

Every tenant can customize their experience to match their brand:

Custom Logo & Favicon – Upload brand assets that appear across the dashboard, public pages & emails
Brand Colors – Primary & accent colors that flow through the widget, forms, dashboard & landing pages
App Name Override – White-label the platform name per tenant (your brand never leaks through)
Custom Footer Text – Tenant-controlled footer copyright & legal links
Dark Mode – Full dark-mode support across the entire dashboard with auto-detect
4 Languages – English, Spanish, Arabic & Hindi, with RTL support for Arabic
Per-Tenant Currency – Each tenant operates in their own currency for receipts & reporting
Marketing Landing Variants – 4 pre-built landing-page templates (light, modern, editorial, classic)
OG Image Override – Per-tenant Open Graph image for social-media link previews

GDPR & Data Compliance

Built-in tools for GDPR, EU VAT, tax-compliance and data privacy:

DPA Template – Article 28 Data Processing Agreement available as a public download for B2B procurement reviews
Cookie Consent Banner – Granular consent for analytics, marketing & functional cookies
Data Export (Article 20) – Tenants can request a full ZIP export of all their data, including uploaded files
Right to Erasure (Article 17) – 30-day cool-off workspace deletion with reachable cancellation banner
Tax-Receipt Retention – Receipts survive tenant erasure (ON DELETE SET NULL) for the legally-required 7-10 year retention
Data Retention Policies – Automated 180-day audit-log purge, 30-day login-attempt purge, 90-day webhook-event purge
Email Domain Verification – DNS TXT challenge prevents spoofed-sender abuse
Trusted Proxy Configuration – Proper IP resolution behind Cloudflare for accurate audit logs
Audit Log – Article 30 records of processing activities with actor, timestamp, IP & resource

Real-World Scenarios – How Operators Use LeadHub

⚡ Scenario 1 – Sell Your Own CRM as a Service

You want to launch a CRM SaaS for niche industries (real estate, agencies, dental clinics):

Set up subscription plans (Starter, Pro, Business, Enterprise) with feature gates per plan
Tenants manage their own leads, pipelines, automations & team members on a white-labeled dashboard
You collect monthly recurring revenue through any of 5 payment gateways
The affiliate engine recruits referrers who earn 20% recurring commissions

⚡ Scenario 2 – Agency Managing Client Leads

You’re a digital agency and want a unified inbox for all your clients’ leads:

Connect Facebook Lead Ads, Google Ads, TikTok & LinkedIn for each client account
Set up per-client pipelines with branded landing pages and embed widgets
Automate email sequences and SMS follow-ups across all clients from one place
The AI Lead Coach tells your account managers which leads to call first each morning
Monthly per-client reports automatically delivered with conversion metrics & ROI

⚡ Scenario 3 – Internal Sales Team CRM

You run a sales team and need a private CRM (not multi-tenant):

Disable self-service registration so it stays single-workspace
Use the full pipelines, automations, calendar sync & AI Lead Coach stack
Ingest leads from your website forms, Calendly bookings & Facebook Lead Ads
Round-robin assignment distributes new leads across your team automatically
Use scoped API keys to push leads from your existing systems

Demo Website

The demo is fully seeded with tenants, leads, pipelines, automations, sequences, deals, receipts and audit history. Some write actions are restricted to keep the demo intact for the next visitor.

Requirements

PHP 8.2 or higher (8.3+ recommended)
MySQL 5.7+ or MySQL 8.x (MariaDB 10.3+ also supported)
Apache or Nginx with mod_rewrite / try_files enabled
PHP Extensions: BCMath, Ctype, cURL, DOM, Fileinfo, JSON, Mbstring, OpenSSL, PDO, Tokenizer, XML, ZIP
SMTP server for outgoing emails (or any Laravel-supported mail driver)
Stripe / PayPal / Razorpay / Paystack accounts for billing (optional – manual bank transfer works without any gateway)
LLM provider API key for AI features (optional – platform works fully without AI)

What You Get

Full source code – Unencrypted Laravel application, no obfuscation, no IonCube
Web-based installer – No CLI or Composer needed (also handles flat & naive upload layouts)
Detailed documentation – Installation, configuration, API reference, gateway setup & admin guide
Support – Direct assistance via our support portal
Free updates – All future updates included with your purchase

Why LeadHub?

Complete SaaS platform – Not just a CRM. A full business you can launch, brand and resell
19 lead sources baked in – Stop paying Zapier; LeadHub talks to every channel natively
5 gateways covered – Sell globally on day one (US/EU via Stripe + PayPal, India via Razorpay, Africa via Paystack)
Self-hosted – Your server, your data, your rules. No vendor lock-in, no per-seat pricing forever
Multi-tenant ready – Sell unlimited workspaces with white-label branding per tenant
GDPR & tax compliant – DPA, Article 17 erasure, Article 20 export, sequential VAT receipts – all built in
Shared hosting friendly – Web installer, URL-based cron, no queue worker required, layout auto-detect
Modern stack – Laravel 13, Filament 4, Livewire 3, Tailwind CSS 4. Clean code, long-term maintainable
Active development – Regular updates with new features, lead sources & integrations

If you want a production-ready CRM SaaS platform that you can launch, brand and monetize today, LeadHub is built exactly for you.

Professional Support

Quick setup takes only a few minutes with the web-based installer. Upload, configure, launch.

For technical questions or customization needs, contact our support team through our dedicated support portal.

LeadHub - Multi-Tenant SaaS CRM with Lead Pipelines, Forms & Automations - 22

LeadHub - Multi-Tenant SaaS CRM with Lead Pipelines, Forms & Automations - 27

Version 1.0.0

- Multi-tenant SaaS architecture
- 19 lead sources: Facebook, Instagram, TikTok, LinkedIn, WhatsApp, Viber, Telegram, X, Snapchat, Pinterest, Google Ads, YouTube, Microsoft Ads, IMAP, Typeform, JotForm, Calendly, Web Form, Email forwarding
- Visual Kanban pipelines with custom stages, value tracking, win/loss reasons
- Multi-pipeline support (sales, support, onboarding, recruiting)
- Lead scoring engine with field, behavior and engagement triggers
- Duplicate detection with configurable email/phone matching and merge workflow
- Email sequences with delays, conditions, stop-on-reply, stop-on-won
- Marketing automations with trigger-condition-action workflows
- Round-robin lead assignment with load balancing
- Calendar 2-way sync with Google Calendar and Microsoft Outlook
- Public booking pages with team round-robin and buffer time
- AI Lead Coach (next-best-action, draft replies, score reasoning, at-risk detection)
- AI smart tags and subject-line optimizer
- Forms and landing pages with block-based builder
- Embeddable JavaScript form widget for any website
- REST API with scoped API keys and per-tenant rate limiting
- Outbound webhooks with HMAC signing, encrypted secrets, delivery logs and retry tracking
- Stripe integration (Hosted Checkout, Customer Portal, subscriptions, refunds)
- PayPal integration (Billing Subscriptions API with signed-webhook verification)
- Razorpay integration (subscriptions API with hosted checkout)
- Paystack integration (hosted checkout and subscription support)
- Manual bank transfer flow with super-admin confirmation
- Flexible plan builder with feature gates and usage limits
- Coupon system (percentage, fixed amount, trial extension, usage limits)
- Tax-compliant receipts with sequential numbering, EU VAT, US sales tax
- Refund credit notes auto-generated as negative receipts
- Annual billing toggle with operator-configurable discount
- Per-tenant currency for receipts and reporting
- VAT and billing-details capture (business name, VAT id, billing address)
- Affiliate engine with referral codes and recurring 20% commissions
- DFY templates marketplace with one-click install (plan-gated install limits)
- Super-admin dashboard with platform-wide MRR/ARR metrics
- Tenant management (create, suspend, activate, restore, hard-delete, refund)
- Tenant impersonation with 60-minute audited sessions
- Audit logs for all admin and tenant actions (180-day retention)
- Database backup management with verification from the browser
- Webhook delivery logs across all tenants
- Two-factor authentication (TOTP with QR code and recovery codes)
- Atomic Redis-counter brute-force lockout (safe under burst load)
- Trusted-proxy middleware for proper IP resolution behind Cloudflare/Nginx
- Super-admin IP allowlist with optional strict mode
- Encrypted webhook secrets at rest with APP_KEY
- Replay-safe HMAC-signed outbound webhooks (Stripe-style timestamp + signature)
- Out-of-order webhook ordering guard for Stripe and PayPal
- Inbound webhook event-id idempotency across all 5 gateways
- Tenant-aware password resets with scoped tokens
- Scoped API keys with read/write permissions per resource
- Strong password policy with breach-database check
- Login lockout enforcement via Filament-aware Login page
- Email domain verification with DNS TXT challenge
- Onboarding email sequence (Day 0, Day 2, Day 5, Day 10)
- Trial drip campaign with 4-language localized subjects
- GDPR DPA template (Article 28) as public PDF download
- GDPR cookie consent banner with granular categories
- GDPR Article 20 data export with file payloads in ZIP
- GDPR Article 17 right-to-erasure with 30-day cool-off
- Tax-receipt retention through tenant erasure (ON DELETE SET NULL)
- Data retention policies (audit logs, login attempts, billing events)
- Custom branding (logo, favicon, primary/accent colors, app name, footer)
- Dark mode support across the entire dashboard
- Multi-language interface (English, Spanish, Arabic with RTL, Hindi)
- Custom domain support per tenant (plan-gated)
- Marketing landing-page variants (light, modern, editorial, classic)
- Per-tenant Open Graph image override
- Web-based installer with layout auto-detection (proper, naive, flat upload)
- Web-based updater (migrations and cache from browser)
- Shared-hosting cron via URL-based scheduler trigger
- Real /health endpoint with DB, cache and storage probes
- Backup verification with SQL-statement counting
- Sync mail driver fallback for hosts without queue workers
- Storage fallback for hosts where symlinks are disabled
- SEO tools (dynamic sitemap.xml, robots.txt, per-tenant og:image)