One platform, six apps — a single Laravel API powering a React admin dashboard and four role-specific mobile apps that run an elevator company end-to-end, from a sales rep's first lead to a customer's support ticket.
Rainbow Lifts digitizes an elevator company's entire operation: sales leads → quotations → projects → inventory → installation → recurring service → invoicing → customer self-service. A single token-authenticated REST API serves a web admin panel and four purpose-built mobile apps — six applications, one system — with passwordless WhatsApp OTP login and granular role-, designation-, and territory-based access control.
Sales reps capture leads in the field with GPS and address autocomplete, then raise quotation requests. Back-office staff turn them into versioned, PDF-generated quotations and into projects with detailed lift specifications. Warehouse stock is tracked and allocated to each project. After installation, lifts move onto a recurring service calendar where field engineers check in on-site, run inspection checklists, and generate handover letters and invoices. Employees clock in and out with geolocation and apply for leave from their phones — and customers get their own app to track their lifts, download invoices, and raise support tickets. The backbone is a stateless Laravel API spanning roughly 37 models, 30 controllers, and 100+ endpoints, with queued side effects so OTP delivery and service notifications never slow a response.
Stateless JSON API with Sanctum tokens covering CRM, quotations with revision history, projects and lift specs, inventory, service calendar and checklists, attendance and leave, invoicing, handover letters, and support tickets.
Full CRUD across every module with MUI DataGrid, a KPI dashboard of revenue trends and pipeline charts built from grouped SQL aggregations, and a live Leaflet map tracking field staff.
Lead capture with GPS location and address autocomplete, quotation requests with generated PDFs, pipeline browsing, geo check-in/out attendance, and background location so managers see rep movement on the web map.
Assigned services from the shared calendar, on-site inspection checklists, job start/complete flows, and downloadable checklist PDFs — built for real field conditions.
A deliberately lean workforce app for geolocation-verified check-in/out and leave, plus a customer self-service app for tracking installed lifts, downloading invoice PDFs, and raising threaded support tickets.
Dedicated service classes generate branded quotations, invoices, service checklists, and handover letters on the backend with mPDF.
Field devices in areas with poor connectivity kept losing sessions.
Dual token lifetimes — 3-hour "online" versus 30-day "offline" tokens — paired with offline-aware apps: persisted tokens, a shared offline notice, and connectivity detection throughout.
Field staff needed sign-in without passwords or email accounts.
Passwordless WhatsApp OTP authentication with anti-spam cooldowns, plus a demo-account path for app-store review. OTP delivery is dispatched as a queued job so login stays fast.
Different roles and territories must see only their own slice of the business.
Layered RBAC: permissions granted directly or via roles and merged at resolution time, combined with zone/city scoping and custom permission, designation, and customer middleware guards.
Building and maintaining four mobile apps without four codebases' worth of effort.
A shared foundation across all apps — one design-system component kit and theme, a common auth context and OTP flow, a uniform Axios service layer, and the same navigation model.
Purpose-built clients instead of one bloated app: each role gets exactly the surface it needs, while all four mobile apps share a common design system, auth flow, offline handling, and API layer — a deliberate engineering choice that made six applications maintainable as one coherent platform. A customer can be traced from first lead through quotation, project, installation, recurring service, and invoicing on one data model.
Drop us a message or call us directly. We reply to every enquiry — usually the same day.
