Multi-tenant SaaS that automates compliance workflows, billing, and client collaboration for Indian Chartered Accountant firms — with GST invoicing, role-based portals, and an installable PWA.
Smart CA is a production multi-tenant SaaS platform that runs a CA firm's entire practice: it auto-generates recurring GST/TDS/ITR compliance tasks, assigns them to staff, and gives partners a real-time view while each client gets a self-service portal for documents, tickets, and billing. Built on Laravel and React 19 with row-level tenancy, Sanctum auth, add-on-based feature gating, FCM push, and server-side GST invoice generation. The live app is login-gated.
Devsoleil (own product)A typical CA firm runs on a messy stack: Excel trackers for who owes which client's filing, WhatsApp for status updates, a separate tool for invoices, email for documents — and nothing that ties it together. Work slips through the cracks, partners are blind to real-time status, and clients are left in the dark. Smart CA consolidates all of that into one system where compliance tasks are generated and assigned automatically, everything is auditable, and clients get self-service access. Many firms share a single deployment, isolated by row-level tenancy — and the same product also ships as a single-tenant on-premise deployment for firms that want their own instance.
Task masters, groups, and recurrence patterns generate and schedule GST, TDS, and ITR work automatically, assigned straight to staff queues.
A partner dashboard with a real-time firm-wide view, a staff work queue with calendar and todos, and a self-service client portal for documents, tickets, and billing.
Recurring bills, server-side GST tax-invoice PDF generation, payment reminders, expense tracking, CSV export, and a payments-oversight dashboard.
Businesses with GST/PAN/TAN and entity details plus a credentials vault for portal logins and filing IDs, with reveal/copy controls.
A paid add-on with a firm-wide channel and direct messages — emoji, reactions, read receipts, deep links, and tiered message retention.
Installs like a native app on any phone; Firebase Cloud Messaging with a service worker delivers both foreground and background notifications.
Many independent firms must share one deployment without any data bleed.
Row-level multi-tenancy: every tenant's data shares one database, isolated by a firm key enforced through a request-scoped tenant context and a global Eloquent scope — application code stays tenancy-unaware while isolation is guaranteed at the query layer.
Stop brute-force logins without leaking which accounts exist.
The first few failures per username+IP are free, then each further failure arms a doubling lockout window up to a 15-minute ceiling. Unknown usernames and wrong passwords return an identical response, so the backoff leaks no account-existence oracle.
Paid capabilities need reliable gating across API and client.
Add-on driven feature gating: paid features like team chat and extra storage are toggled per firm and enforced both in API middleware and in SPA route/nav guards, with the add-on catalog versioned through migrations.
Push notifications at scale across many devices and roles.
A queued fan-out pipeline to per-device FCM tokens with per-role device caps, and a service worker that handles both foreground and background delivery.
Session hygiene for a system holding sensitive filing credentials.
Per-role session caps, forced first-login password change, password changes invalidate other sessions, and client self-service password reset routed through an in-app admin notification — no SMS/email gateway dependency.
Drop us a message or call us directly. We reply to every enquiry — usually the same day.