# Executive Summary

## Most valuable 15 features

1. Agency/workspace tenant separation
2. Contacts and companies
3. Unified contact activity timeline
4. Pipelines and stages
5. Opportunity Kanban/list
6. Ownership, followers and assignment scope
7. Tasks and follow-up queues
8. Shared communications inbox
9. Email/SMS consent and delivery state
10. Calendars, availability and appointments
11. Forms feeding CRM records
12. Versioned workflow automation
13. Role-based dashboards and sales reporting
14. Granular roles, permissions and audit logs
15. Reusable workspace templates and provisioning

## Recommended Phase 1

Build the multi-tenant foundation, workspace switcher, contacts/companies/tags/custom fields, unified activity, pipelines/opportunities/Kanban, tasks, ownership, basic dashboards/reports, role/data scopes, audit logs, safe imports/exports and essential settings. Do not begin with a broad marketing suite.

## Do not build initially

Website/funnel/store builder, courses/community, branded mobile/desktop apps, affiliate network, prospecting/ad manager, reputation/listings, WordPress hosting, domain resale, advanced AI agents, quizzes, QR codes and large add-on catalog.

## External services

Email, SMS/voice, calendar/video, payments/tax, identity/MFA, object storage/scanning, observability, queues/scheduling, address/time-zone normalization and optional enrichment.

## Major entities

Agency, Workspace, User, Membership, Role, Permission, Contact, Company, ContactMethod, Consent, Tag, CustomField, Pipeline, Stage, Opportunity, StageHistory, Task, Conversation, Message, Calendar, EventType, Appointment, Workflow/Version/Execution, Form/Submission, Product, Invoice, Payment, Report, Template/Version, Entitlement, Integration and AuditEvent.

## Proposed original navigation

- Agency: Overview / Workspaces / Templates / Plans & Billing / Team & Access / Integrations / Security.
- Client: Home / People / Sales / Inbox / Schedule / Automations / Payments / Insights / Settings.

## Biggest usability improvements

- Fewer destinations, progressive disclosure and role-based defaults.
- Unmistakable tenant context.
- One contact workspace and event stream.
- Accessible/reversible Kanban.
- Quick-create drawer and consistent assignment model.
- Workflow simulation/versioning; template diffs/rollback.
- Effective-access previews and warnings for dangerous permissions.
- Purpose-built mobile flows rather than compressed desktop UI.

## Technical risks

- Tenant-safe query design, workflow idempotency/timers, provider webhook ordering, reporting scale, search/indexing, high-volume activity streams, template dependency migration and channel deliverability.

## Security risks

- Cross-tenant data leakage, over-privileged roles, agency impersonation, secret exposure, unsafe exports, billing/refund abuse, consent violations, webhook spoofing and insufficient audit evidence.

## Questions before implementation

1. Who is the initial customer: agencies, single businesses, or both?
2. Which two industries define the first workflows and compliance needs?
3. Is agency support access opt-in, time-limited and client-visible?
4. Which channels and countries launch first?
5. Are payments Phase 2 or deferred?
6. What are retention, deletion, export and residency requirements?
7. What scale assumptions govern contacts, events, messages and automation runs per tenant?
8. Which role templates and data scopes are mandatory?
9. What template assets may be copied, and how are conflicts/version upgrades handled?
10. What actions require MFA/reauthentication or dual approval?
11. Which metrics define Phase 1 success?
12. What Cloudflare data architecture is acceptable if D1 limits are reached?

## Audit limitations

The account was observed on a Starter trial. No communications, records, users, bookings, template applications, integrations, billing changes or paid services were executed. Full appointment validation, real message delivery, drag-stage side effects, workflow publication, snapshot application and SaaS-plan configuration require a controlled test account and, for SaaS features, possibly a higher plan.
