[ FINANCE & OPERATIONS ]
Ekam
Client Intelligence Platform
A document-centric workspace for purchase orders, invoices, and quotes, with secure server-to-server PDF generation and Firebase auth.
Domain
FINANCE & OPERATIONS
Status
Built
Use when
Mid-market service firms need a custom PO, invoice, or quote workspace with secure document generation.
Reference
Available for new engagements
01. The problem
Mid-market service firms outgrow spreadsheets and Word templates for PO, invoice, and quote workflows. Off-the-shelf tools are too generic; bespoke is too expensive. The middle path is a tightly-scoped custom platform that fits the actual workflow.
02. The approach
Built CIP as a Next.js + Firebase application with a separate FastAPI document service for PDF generation. Auth via Firebase. Scoped service accounts for the document service so PDFs cannot be generated by anyone outside the auth context.
03. The architecture
Next.js + Firebase (Auth, Firestore, Storage, Functions) for the workspace. FastAPI PDF service runs on Cloud Run, deployed without `--allow-unauthenticated`. Service-to-service auth uses Google-signed identity tokens. The PDF service can only be invoked by the workspace, not by arbitrary callers.
04. The outcome
A bespoke document workspace at off-the-shelf-tool cost. The security posture meets enterprise procurement scrutiny because the document service is genuinely locked down.
[ ATI SHAPE ]
Predictive intelligence
Future hook for predictive customer scoring on the document timeline
Agentic execution
Workflow automation for document approval routing
Secure data
Service-to-service auth via signed identity tokens
Actionable outcomes
Generated PDFs and approved documents end up in the right place
[ IMPACT ]
Locked
PDF service deployed without --allow-unauthenticated
Signed
Service-to-service auth via Google identity tokens
Bespoke
Workflow that fits the firm, not the tool
[ NEXT STEP ]
See Ekam in your data.
[ READY FOR YOUR STORY? ]