Problem
2LN wanted to serve two audiences from a single foundation: HR departments of large organisations, which steer their talent, and SMEs, which must keep their staff administration in order, without ever mixing one company’s data with another’s.
Solution
A Django API and two Next.js applications (the customer workspace and the back-office) share a PostgreSQL database. Isolation between companies is enforced twice: by the application and by the database itself (Row Level Security). Identity is delegated to Zitadel, with MFA, company sign-in and phone-number sign-in for staff without an e-mail address. Every feature starts from a written specification, then is built and tested, from access rules up to browser journeys.
My role
- End-to-end design and development: architecture, backend, interfaces, infrastructure and production rollout
- Spec-driven development, with AI agents supervised through my reviews
Impact
- Data isolation: a double barrier, the application and PostgreSQL Row Level Security, with tests checking on every route that no company can read another’s data
- Identity: OIDC with Zitadel, MFA, Microsoft or Google sign-in for companies
- Data lifecycle: retention periods per category, export and erasure on request, automatic daily purge, register of processing activities
- Governed AI: a single entry point to the models, an interchangeable provider, validated answers, a monthly budget per company, and go-live only after a quality measurement
- Quality: bilingual interface, WCAG 2.1 AA accessibility checked automatically on every screen, performance budgets enforced by Lighthouse
- Operations: Dokploy deployment, wildcard certificates, daily off-server backups, error monitoring
Key features
- Talent Intelligence: job and skills framework, enriched employee profiles, matching for internal mobility, diagnostic campaigns, flight-risk index, succession for critical positions and an executive dashboard
- SimpliRH: staff register and a file for each employee, job descriptions, document vault with letter templates, legal calendar, leave and absences
- SimpliRH for employees: a phone-first portal, signed annual appraisal interviews, training plan
- HR assistant that answers by citing articles of the Labour Code
- Notification centre and a back-office for the 2LN team
- French and English interface, one workspace per company
