LeadHub - Multi-Tenant SaaS CRM with Lead Pipelines, Forms & Automations

The all-in-one lead-to-revenue platform you can brand and resell.
Capture leads from 19 sources, qualify with AI, route through visual pipelines, automate engagement, charge in 5 currencies – every workspace white-labeled, GDPR-ready and yours.

Multi-tenant SaaS architecture
19 lead sources – Facebook, Google Ads, TikTok, LinkedIn, WhatsApp, IMAP, Calendly + more
AI Lead Coach with next-best-action suggestions, draft replies & score reasoning
Visual Kanban pipelines with custom stages, value tracking, win/loss reasons
5 payment gateways – Stripe, PayPal, Razorpay, Paystack, Manual bank transfer
DFY marketplace with one-click install for automations, sequences, forms & pipelines
GDPR-grade compliance – DPA template, Article 17 erasure, Article 20 export, audit logs
Web-based installer & updater (no Composer, no SSH, no CLI)

Stop chasing leads. Start owning your pipeline.

LeadHub is a self-hosted, multi-tenant SaaS CRM that lets you ingest leads from 19 channels, qualify them with built-in scoring and AI coaching, route them through visual pipelines, engage with email sequences and SMS, and convert them through a tax-compliant billing engine – all from one branded dashboard your customers can log into.

Built on Laravel 13 with a polished Filament 4 admin, Livewire 3 reactivity and Tailwind CSS, LeadHub is designed to be sold as a service (SaaS) or used internally. Each tenant gets their own white-labeled dashboard, branded landing pages, public booking calendar and team workspace. You control everything from a powerful super-admin panel – plans, gateways, tenants, coupons, tax rates, audit logs and more.

AI features powered by your favorite LLM provider take your sales workflow to the next level: per-lead next-best-action suggestions, draft reply generation, score-reasoning explainers and at-risk-lead surfacing – all optional, all plan-gated, all working alongside a fully functional CRM that runs perfectly without any AI keys.

⚡ Core Features at a Glance

✅ 19 Lead Sources – Facebook, Instagram, TikTok, LinkedIn, WhatsApp, Viber, Telegram, X/Twitter, Snapchat, Pinterest, Google Ads, YouTube, Microsoft Ads, IMAP, Typeform, JotForm, Calendly, Web Form & Email forwarding
✅ Visual Kanban Pipelines – Drag-and-drop stages, value tracking, win/loss reasons, multiple pipelines per tenant
✅ Lead Scoring Engine – Rule-based scoring with field, behavior & engagement triggers
✅ Duplicate Detection – Configurable email/phone matching with merge workflow
✅ Email Sequences – Drip campaigns with delays, conditions, stop-on-reply & engagement tracking
✅ Forms & Landing Pages – Block-based builder, embeddable JavaScript widget, branded thank-you redirects
✅ Marketing Automations – Trigger → condition → action workflows with round-robin assignment
✅ Calendar 2-Way Sync – Google Calendar & Microsoft Outlook with public booking pages
✅ AI Lead Coach – Per-lead next-best-action, draft replies, score-reasoning explainers
✅ Customer Health Scoring – Identify at-risk leads before they go cold
✅ Public Booking Pages – Round-robin team assignment with buffer time & availability rules
✅ REST API + Webhooks – Scoped API keys, replay-safe signed webhooks, full delivery logs
✅ Multi-Tenant SaaS – Sell unlimited workspaces
✅ 5 Payment Gateways – Stripe, PayPal, Razorpay, Paystack, Manual bank transfer
✅ Affiliate Engine – Recurring 20% commissions, payout tracking, audit trail
✅ DFY Marketplace – Pre-built automations, sequences, forms & pipelines (one-click install)
✅ GDPR Compliance Suite – DPA template, cookie banner, Article 17 erasure, Article 20 export
✅ Tax-Compliant Receipts – Sequential numbering, EU VAT, US sales tax, multi-currency
✅ Web-Based Installer – Browser-driven setup, no command line, no Composer
✅ Shared Hosting Support – Works on cPanel out of the box, no SSH or queue worker required

Multi-Tenant SaaS Architecture

LeadHub is built from the ground up as a multi-tenant SaaS platform. Each tenant (your customer) gets:

• A full-featured tenant dashboard with leads, pipelines, automations, sequences, forms, calendar & team management
• White-labeled branding – primary color, accent color, logo, favicon, app name, footer text – all per-tenant
• Isolated data – query-level tenant isolation; tenants never see each other’s leads, deals or settings
• Role-based access – tenant owner, admin, staff & viewer roles with granular permissions
• Public-facing surfaces – landing pages, forms, booking calendar & team contact pages

As the platform owner, you manage everything from the super-admin panel: create plans, set per-plan feature gates and usage limits, manage tenants, configure all 5 payment gateways, monitor revenue, view audit logs & backups. You can impersonate any tenant in one click (60-minute audited sessions) to troubleshoot issues without ever asking for their password.

Lead Capture – 19 Sources, Every Channel

LeadHub gives you nineteen ways to ingest leads automatically – no Zapier, no glue code:

• Social & Ads – Facebook Lead Ads, Instagram, TikTok, LinkedIn, X/Twitter, Snapchat, Pinterest
• Messaging – WhatsApp, Viber, Telegram
• Paid Search – Google Ads, YouTube, Microsoft Ads
• Inbox & Forms – IMAP email parsing, Typeform, JotForm, Calendly bookings, Web Forms
• Embeddable Widget – A lightweight JavaScript snippet that drops a branded form button onto any website with a single script tag
• REST API + Webhooks – Scoped API keys for inbound posts, replay-safe HMAC-signed outbound webhooks
• Public Forms – Multi-step shareable links, multi-language (English, Spanish, Arabic, Hindi) and reCAPTCHA-protected
• Manual Entry – Bulk CSV import, copy-paste lead bulk add, manual single-lead form

Every captured lead is enriched with full context: source, campaign, UTM tags, assigned user, pipeline stage, score, custom fields and a complete activity timeline. Your team can reply, change stages, log calls, schedule meetings and apply tags – all from one filterable dashboard.

AI-Powered Intelligence – LLM Built In

LeadHub integrates directly with your favorite LLM provider to supercharge your sales workflow:

• AI Lead Coach – Per-lead next-best-action suggestions: when to call, when to email, what to say, when to drop
• Draft Reply Generation – One-click AI-drafted replies based on the lead’s full activity history. Edit and send in seconds
• Score Reasoning – AI explains in plain English why a lead scored 87 instead of 62 – surfacing the rules that fired
• At-Risk Detection – Identify leads going cold based on engagement decay, missed touchpoints & sentiment shifts
• Smart Tags – AI suggests relevant tags from lead content, saving manual categorization across thousands of records
• Subject Line Optimizer – Generate & A/B-test subject line variants for every email sequence step

AI features are optional and plan-gated – you can enable or disable them per subscription plan. Tenants on plans without AI still get a fully functional CRM with manual scoring, manual tagging and manual sequence building.

Pipelines, Automations & Engagement

Every tenant gets a powerful visual pipeline workspace for moving leads through their sales process:

• Visual Kanban Pipelines – Drag-and-drop stages with custom names, colors, deal value tracking and probability percentages
• Multi-Pipeline Support – Create unlimited pipelines per tenant (sales, support, onboarding, recruiting)
• Win/Loss Reasoning – Configurable reason lists captured at close so you can analyse churn drivers later
• Lead Scoring Engine – Rule-based scoring with field, behavior & engagement triggers
• Duplicate Detection – Configurable email/phone fuzzy matching with merge workflow that preserves activity history
• Email Sequences – Drip campaigns with delays, conditions, stop-on-reply, stop-on-won and engagement tracking (opens, clicks, replies)
• Marketing Automations – Trigger → condition → action workflows: round-robin assignment, lead scoring, SMS, webhooks, slack notifications
• Calendar 2-Way Sync – Google Calendar & Microsoft Outlook with conflict detection, buffer time and availability rules

Public Surfaces – Landing Pages, Forms & Booking

Each tenant gets a suite of public-facing pages, accessible without login:

Public Landing Pages

Drag-and-drop landing-page builder with reusable blocks (hero, features, pricing, FAQ, testimonials, CTA forms). Every page is SEO-ready with editable meta tags, OG image and JSON-LD schema. Multi-language out of the box (English, Spanish, Arabic, Hindi).

Public Forms

Shareable form links, embeddable JavaScript widget & QR-code generation. Multi-step forms with conditional logic, file uploads and reCAPTCHA. Branded thank-you pages with optional URL redirect.

Public Booking Calendar

Customer-facing scheduling page with team round-robin, individual links, buffer time, availability rules and Google/Microsoft sync. Bookings auto-create leads, send reminder emails and schedule SMS notifications.

White-Label Tenant Portals

Each tenant’s dashboard renders with their own logo, brand colors, app name, favicon & footer text – your platform brand never leaks through. Optional dark mode across the whole admin.

Billing & Monetization – Five Gateways, Sell on Day One

LeadHub includes a complete multi-gateway billing engine so you can start charging tenants the moment you launch:

• Stripe Integration – Hosted Checkout, Customer Portal, recurring subscriptions, webhook idempotency, refunds & credit-note receipts
• PayPal Integration – Billing-subscriptions API with signed-webhook verification & out-of-order event ordering guard
• Razorpay Integration – Subscriptions API for the Indian market with hosted checkout
• Paystack Integration – Sub-Saharan Africa coverage with hosted checkout & subscription support
• Manual Bank Transfer – Wire-transfer flow with super-admin confirmation and configurable bank-detail templating
• Flexible Plans – Unlimited plans with monthly & annual pricing, feature gates, usage limits and seat caps
• Plan Feature Gates – Control access per plan: lead sources, AI Lead Coach, marketplace installs, white-label, custom domain, API, webhook quota, team seats
• Coupon System – Percentage and fixed-amount discounts, trial extensions, usage limits, date ranges, plan restrictions
• Tax-Compliant Receipts – Sequential numbering (LH-YYYY-NNNNNN), EU VAT, US sales tax, multi-currency, GDPR Article 17.3.b retention
• Refund Credit Notes – Negative receipts auto-generated on refund for clean year-end accounting
• Annual Billing – Monthly/annual toggle with operator-configurable discount per plan
• Trial Periods – Configurable free trial with automatic expiry, dunning emails & upgrade prompts
• Affiliate Engine – Referral codes, recurring 20% commission tracking, payout audit trail
• Per-Tenant Currency – Each tenant operates in their own currency for receipts & reporting
• VAT & Billing Details – Tenant-side capture of business name, VAT/GST id, billing address, billing email & country

Super-Admin Panel – Full Platform Control

The super-admin panel gives you complete control over your SaaS platform:

• Platform Dashboard – Total tenants, active subscriptions, MRR/ARR, churn rate, recent activity, lead-source mix
• Tenant Management – Create, view, suspend, activate, restore & hard-delete tenants. Process refunds directly
• Plan Builder – Create & reorder plans with granular feature gates and usage limits per resource
• Coupon Management – Create promotional codes with percentage/fixed discounts, trial extensions, usage caps & expiry
• Multi-Gateway Settings – Configure Stripe, PayPal, Razorpay, Paystack & Manual bank-transfer credentials in one place
• Tax Rate Configuration – Per-country/region tax rates with EU VAT MOSS & US sales-tax support
• Platform Settings – SMTP, branding, landing-page builder, email templates & integrations from the browser
• Tenant Impersonation – One-click login as any tenant (60-minute audited sessions, full audit trail)
• Affiliate Payout Tracking – Pending commissions, paid commissions, payout audit log per affiliate
• DFY Templates Library – Curate marketplace templates and feature-gate them per plan
• Audit Logs – Complete trail of every action taken by admins and tenants (180-day retention, configurable)
• Database Backups – Create, verify & download backups directly from the browser
• Webhook Delivery Logs – Monitor outbound webhook deliveries, failures & retries across all tenants
• SA IP Allowlist – Lock the super-admin panel down to specific IPs/CIDR ranges with optional strict mode

Security & Authentication

LeadHub takes security seriously with enterprise-grade protections built in:

• Two-Factor Authentication (2FA) – TOTP-based 2FA with QR code setup, recovery codes & per-role enforcement
• Atomic Brute-Force Lockout – Cache-based 15-minute counter with safe-under-burst-load semantics
• Trusted Proxy Configuration – Proper Cloudflare/Nginx-aware IP resolution with safe defaults
• Super-Admin IP Allowlist – Optional strict mode requiring TCP-peer match in addition to forwarded IP
• Encrypted Webhook Secrets – All outbound webhook secrets encrypted at rest with APP_KEY
• Replay-Safe Signed Webhooks – Stripe-style timestamp + HMAC signature with consumer-tolerance validation
• Tenant Data Isolation – Query-level scoping prevents cross-tenant data exposure
• Role-Based Access Control – Six roles: super-admin, tenant owner, tenant admin, staff, viewer, customer
• Scoped API Keys – Granular read/write permissions per resource with per-key rate limits
• Strong Password Policy – Enforced minimum length, complexity, breach-database check on signup
• CSRF, XSS & SQL-Injection Protection – Full Laravel security stack with Eloquent parameterization
• Audit Trail – Every admin and tenant action logged with timestamp, actor & IP
• Session Lockout – Configurable session lifetime with idle-timeout enforcement
• Email Domain Verification – DNS TXT-record challenge prevents spoofed sender addresses

Integrations – API, Webhooks & Embed Widget

LeadHub is built for developers, agencies and product owners who need to plug it into their existing tools:

REST API

A complete RESTful API with endpoints for leads, pipelines, deals, forms, automations, sequences and webhooks. Authenticated via scoped API keys with per-tenant rate limiting (60 requests/minute default, configurable per plan). Interactive API documentation is built into every tenant dashboard.

Outbound Webhooks

Configure webhooks to receive real-time notifications when events happen: lead.created, lead.stage_changed, deal.won, form.submitted, automation.triggered. Replay-safe HMAC signatures, encrypted secrets at rest, full delivery logs with retry tracking and dead-letter alerts. Drop-in compatible with Slack, Discord, Zapier and any custom endpoint.

Embeddable Form Widget

A single JavaScript snippet drops a lead-capture form onto any website. The widget automatically matches the tenant’s brand colors and submits to the LeadHub backend cross-origin. Multi-step support, file uploads, reCAPTCHA-protected.

Email System – Automated Communication

LeadHub sends 15+ types of automated emails to keep tenants and their leads informed:

• Onboarding Email Sequence – Welcome series (Day 0, Day 2, Day 5, Day 10) to guide new tenants through setup
• Trial Drip Campaign – Behavior-based emails through the 14-day trial with localized subjects (4 languages)
• Lead Sequences – Tenant-defined drip campaigns with stop-on-reply, stop-on-won & engagement tracking
• Booking Confirmations – Auto-sent when public-calendar bookings happen, with .ics calendar attachments
• Booking Reminders – 24-hour and 1-hour reminder emails before scheduled meetings
• Deal Won Notifications – Internal team alerts when a lead converts
• Plan Limit Alerts – Tenant warnings when they approach lead/seat/storage caps
• Dunning Emails – Escalating payment-failure reminders with eventual subscription suspension
• Trial Expiry Notices – Prompt tenants to subscribe before their trial ends
• Team Invitations – Signed invite links for adding team members with role pre-assignment
• Password Reset – Sync-driver delivery (works on shared hosting without queue worker)
• Affiliate Commission Notifications – Monthly summaries to referrers
• GDPR Erasure Confirmations – Cool-off period reminder during the 30-day window
• Workspace Deletion Warnings – Final notice before the scheduled hard-delete fires

SMTP is configured through the admin panel with a built-in test email feature. Slack & Discord webhook delivery available as alternatives for transactional alerts.

Team Collaboration

Each tenant can invite team members to collaborate on lead management:

• Team Invitations – Invite via email with signed, single-use, expiring links
• Role Assignment – Owner, admin, staff & viewer roles with different permission levels
• Plan-Limited Seats – Control team-size cap per plan with a friendly “upgrade to add more” prompt
• Shared Pipelines – All team members see the same dashboard with permission-based visibility
• Lead Assignment – Manual assignment, round-robin or load-balanced auto-assignment
• Activity Notifications – In-app notification panel with unread counters & email digest
• Per-User Audit Log – See exactly who did what and when, scoped to the tenant

Infrastructure – Install Anywhere, No DevOps

LeadHub is designed to run on any hosting environment, including shared cPanel:

• Web-Based Installer – Browser-driven setup wizard. No command line, no SSH, no Composer. Upload, visit the URL, follow the steps
• Layout Auto-Detection – Works in proper public/-as-webroot setups, naive uploads & flat installs alike
• Requirements Checker – Verifies PHP version, extensions and folder permissions before installation
• Web-Based Updater – Run database migrations and clear caches from your browser. No SSH needed for updates
• Database Backups – Create, verify & download backups directly from the admin panel
• Shared Hosting Cron – URL-based scheduler trigger works with cPanel cron without CLI scheduler
• Sync Mail Driver – Optional sync-driven email delivery for hosts where queue workers can’t run
• Storage Fallback – Serves uploaded files without symlinks for shared hosting where symlinks are disabled
• SEO Ready – Dynamic sitemap.xml, robots.txt and per-tenant og:image generation
• Health Check Endpoint – Real DB + cache + storage probe with 200/503 status response
• Audit Log Retention – Configurable 180-day rolling window with nightly purge command
• Login Attempt Retention – 30-day forensic window for brute-force investigation

Customization & Branding

Every tenant can customize their experience to match their brand:

• Custom Logo & Favicon – Upload brand assets that appear across the dashboard, public pages & emails
• Brand Colors – Primary & accent colors that flow through the widget, forms, dashboard & landing pages
• App Name Override – White-label the platform name per tenant (your brand never leaks through)
• Custom Footer Text – Tenant-controlled footer copyright & legal links
• Dark Mode – Full dark-mode support across the entire dashboard with auto-detect
• 4 Languages – English, Spanish, Arabic & Hindi, with RTL support for Arabic
• Per-Tenant Currency – Each tenant operates in their own currency for receipts & reporting
• Marketing Landing Variants – 4 pre-built landing-page templates (light, modern, editorial, classic)
• OG Image Override – Per-tenant Open Graph image for social-media link previews

GDPR & Data Compliance

Built-in tools for GDPR, EU VAT, tax-compliance and data privacy:

• DPA Template – Article 28 Data Processing Agreement available as a public download for B2B procurement reviews
• Cookie Consent Banner – Granular consent for analytics, marketing & functional cookies
• Data Export (Article 20) – Tenants can request a full ZIP export of all their data, including uploaded files
• Right to Erasure (Article 17) – 30-day cool-off workspace deletion with reachable cancellation banner
• Tax-Receipt Retention – Receipts survive tenant erasure (ON DELETE SET NULL) for the legally-required 7-10 year retention
• Data Retention Policies – Automated 180-day audit-log purge, 30-day login-attempt purge, 90-day webhook-event purge
• Email Domain Verification – DNS TXT challenge prevents spoofed-sender abuse
• Trusted Proxy Configuration – Proper IP resolution behind Cloudflare for accurate audit logs
• Audit Log – Article 30 records of processing activities with actor, timestamp, IP & resource

Real-World Scenarios – How Operators Use LeadHub

⚡ Scenario 1 – Sell Your Own CRM as a Service

You want to launch a CRM SaaS for niche industries (real estate, agencies, dental clinics):

• Set up subscription plans (Starter, Pro, Business, Enterprise) with feature gates per plan
• Tenants manage their own leads, pipelines, automations & team members on a white-labeled dashboard
• You collect monthly recurring revenue through any of 5 payment gateways
• The affiliate engine recruits referrers who earn 20% recurring commissions

⚡ Scenario 2 – Agency Managing Client Leads

You’re a digital agency and want a unified inbox for all your clients’ leads:

• Connect Facebook Lead Ads, Google Ads, TikTok & LinkedIn for each client account
• Set up per-client pipelines with branded landing pages and embed widgets
• Automate email sequences and SMS follow-ups across all clients from one place
• The AI Lead Coach tells your account managers which leads to call first each morning
• Monthly per-client reports automatically delivered with conversion metrics & ROI

⚡ Scenario 3 – Internal Sales Team CRM

You run a sales team and need a private CRM (not multi-tenant):

• Disable self-service registration so it stays single-workspace
• Use the full pipelines, automations, calendar sync & AI Lead Coach stack
• Ingest leads from your website forms, Calendly bookings & Facebook Lead Ads
• Round-robin assignment distributes new leads across your team automatically
• Use scoped API keys to push leads from your existing systems

Demo Website

The demo is fully seeded with tenants, leads, pipelines, automations, sequences, deals, receipts and audit history. Some write actions are restricted to keep the demo intact for the next visitor.

Requirements

• PHP 8.2 or higher (8.3+ recommended)
• MySQL 5.7+ or MySQL 8.x (MariaDB 10.3+ also supported)
• Apache or Nginx with mod_rewrite / try_files enabled
• PHP Extensions: BCMath, Ctype, cURL, DOM, Fileinfo, JSON, Mbstring, OpenSSL, PDO, Tokenizer, XML, ZIP
• SMTP server for outgoing emails (or any Laravel-supported mail driver)
• Stripe / PayPal / Razorpay / Paystack accounts for billing (optional – manual bank transfer works without any gateway)
• LLM provider API key for AI features (optional – platform works fully without AI)

What You Get

• Full source code – Unencrypted Laravel application, no obfuscation, no IonCube
• Web-based installer – No CLI or Composer needed (also handles flat & naive upload layouts)
• Detailed documentation – Installation, configuration, API reference, gateway setup & admin guide
• Support – Direct assistance via our support portal
• Free updates – All future updates included with your purchase

Why LeadHub?

• Complete SaaS platform – Not just a CRM. A full business you can launch, brand and resell
• 19 lead sources baked in – Stop paying Zapier; LeadHub talks to every channel natively
• 5 gateways covered – Sell globally on day one (US/EU via Stripe + PayPal, India via Razorpay, Africa via Paystack)
• Self-hosted – Your server, your data, your rules. No vendor lock-in, no per-seat pricing forever
• Multi-tenant ready – Sell unlimited workspaces with white-label branding per tenant
• GDPR & tax compliant – DPA, Article 17 erasure, Article 20 export, sequential VAT receipts – all built in
• Shared hosting friendly – Web installer, URL-based cron, no queue worker required, layout auto-detect
• Modern stack – Laravel 13, Filament 4, Livewire 3, Tailwind CSS 4. Clean code, long-term maintainable
• Active development – Regular updates with new features, lead sources & integrations

If you want a production-ready CRM SaaS platform that you can launch, brand and monetize today, LeadHub is built exactly for you.

Professional Support

Quick setup takes only a few minutes with the web-based installer. Upload, configure, launch.

For technical questions or customization needs, contact our support team through our dedicated support portal.

Version 1.0.0

 - Multi-tenant SaaS architecture - 19 lead sources: Facebook, Instagram, TikTok, LinkedIn, WhatsApp, Viber, Telegram, X, Snapchat, Pinterest, Google Ads, YouTube, Microsoft Ads, IMAP, Typeform, JotForm, Calendly, Web Form, Email forwarding - Visual Kanban pipelines with custom stages, value tracking, win/loss reasons - Multi-pipeline support (sales, support, onboarding, recruiting) - Lead scoring engine with field, behavior and engagement triggers - Duplicate detection with configurable email/phone matching and merge workflow - Email sequences with delays, conditions, stop-on-reply, stop-on-won - Marketing automations with trigger-condition-action workflows - Round-robin lead assignment with load balancing - Calendar 2-way sync with Google Calendar and Microsoft Outlook - Public booking pages with team round-robin and buffer time - AI Lead Coach (next-best-action, draft replies, score reasoning, at-risk detection) - AI smart tags and subject-line optimizer - Forms and landing pages with block-based builder - Embeddable JavaScript form widget for any website - REST API with scoped API keys and per-tenant rate limiting - Outbound webhooks with HMAC signing, encrypted secrets, delivery logs and retry tracking - Stripe integration (Hosted Checkout, Customer Portal, subscriptions, refunds) - PayPal integration (Billing Subscriptions API with signed-webhook verification) - Razorpay integration (subscriptions API with hosted checkout) - Paystack integration (hosted checkout and subscription support) - Manual bank transfer flow with super-admin confirmation - Flexible plan builder with feature gates and usage limits - Coupon system (percentage, fixed amount, trial extension, usage limits) - Tax-compliant receipts with sequential numbering, EU VAT, US sales tax - Refund credit notes auto-generated as negative receipts - Annual billing toggle with operator-configurable discount - Per-tenant currency for receipts and reporting - VAT and billing-details capture (business name, VAT id, billing address) - Affiliate engine with referral codes and recurring 20% commissions - DFY templates marketplace with one-click install (plan-gated install limits) - Super-admin dashboard with platform-wide MRR/ARR metrics - Tenant management (create, suspend, activate, restore, hard-delete, refund) - Tenant impersonation with 60-minute audited sessions - Audit logs for all admin and tenant actions (180-day retention) - Database backup management with verification from the browser - Webhook delivery logs across all tenants - Two-factor authentication (TOTP with QR code and recovery codes) - Atomic Redis-counter brute-force lockout (safe under burst load) - Trusted-proxy middleware for proper IP resolution behind Cloudflare/Nginx - Super-admin IP allowlist with optional strict mode - Encrypted webhook secrets at rest with APP_KEY - Replay-safe HMAC-signed outbound webhooks (Stripe-style timestamp + signature) - Out-of-order webhook ordering guard for Stripe and PayPal - Inbound webhook event-id idempotency across all 5 gateways - Tenant-aware password resets with scoped tokens - Scoped API keys with read/write permissions per resource - Strong password policy with breach-database check - Login lockout enforcement via Filament-aware Login page - Email domain verification with DNS TXT challenge - Onboarding email sequence (Day 0, Day 2, Day 5, Day 10) - Trial drip campaign with 4-language localized subjects - GDPR DPA template (Article 28) as public PDF download - GDPR cookie consent banner with granular categories - GDPR Article 20 data export with file payloads in ZIP - GDPR Article 17 right-to-erasure with 30-day cool-off - Tax-receipt retention through tenant erasure (ON DELETE SET NULL) - Data retention policies (audit logs, login attempts, billing events) - Custom branding (logo, favicon, primary/accent colors, app name, footer) - Dark mode support across the entire dashboard - Multi-language interface (English, Spanish, Arabic with RTL, Hindi) - Custom domain support per tenant (plan-gated) - Marketing landing-page variants (light, modern, editorial, classic) - Per-tenant Open Graph image override - Web-based installer with layout auto-detection (proper, naive, flat upload) - Web-based updater (migrations and cache from browser) - Shared-hosting cron via URL-based scheduler trigger - Real /health endpoint with DB, cache and storage probes - Backup verification with SQL-statement counting - Sync mail driver fallback for hosts without queue workers - Storage fallback for hosts where symlinks are disabled - SEO tools (dynamic sitemap.xml, robots.txt, per-tenant og:image)