🏢 AdminOS

AI-powered business operating system for South African SMEs, NGOs, schools, and clinics.

"One AI system that runs your business. Invoicing. Compliance. Staff. Clients."

Status (26 Oct 2026): AdminOS is app-native today. The WhatsApp channel is built but not yet connected: Meta Tech Provider onboarding and message-template approval are in progress, so no customer messages are sent over WhatsApp yet.

---

FNB App Hackathon — Youth Entrepreneurship & Small Business Growth

Live product: https://adminos.co.za · Pitch deck: docs/hackathon/AdminOS-FNB-Hackathon-Pitch.pdf

AdminOS takes a young South African founder from "I have an idea" to "I run a business" with one loop: get paid → stay compliant → know your numbers → grow.

Step	What is built and live today
Get paid	Branded tax invoices and payment receipts, Quick Sale (cash / walk-in), 5-tier automated debt-recovery agent, Cash Cockpit, bank-statement import and reconciliation (FNB / Capitec / ABSA / Standard Bank / Nedbank / TymeBank CSV: auto-categorised, payments matched to invoices and settled on one tap)
Stay compliant	19 SARS / CIPC / COIDA obligations pre-loaded with the real penalty for missing each, dates rolled forward monthly, POPIA consent layer
Know your numbers	Chart-of-accounts categorisation from day one, health score, daily AI brief, accountant-ready exports (income statement, VAT, journal CSV), payroll with PAYE / UIF / SDL
Grow	Bookings with 24h reminders, inventory with reorder alerts, suppliers with B-BBEE scorecard, staff, tasks and goals
Built for SA	Mobile-first (tested at 390px), PWA / offline for load-shedding, English / isiZulu / isiXhosa / Afrikaans, Expo staff app

Roadmap (not built yet — stated honestly): a live bank connection (today the bank loop is CSV upload), pay-from-invoice, and a consented credit-readiness profile for lenders.

Verification: npm test (238 passing) · CI runs tsc --noEmit, tests and a quality ratchet · scripts/persona-walk.mjs walks 7 industry personas on production (122/122) · scripts/hackathon/walk.mjs drives the demo tenant with Playwright at desktop and phone width and reports console errors, failed loads and horizontal overflow.

---

The Problem

South African SMEs pay for 6–8 separate tools and still rely on WhatsApp groups, spreadsheets, and late-night phone calls to run their businesses. They're underserved by international SaaS tools designed for US markets — tools that don't understand load shedding, 11 official languages, POPIA compliance, or the reality of chasing invoices in an economy where cash flow is survival.

The Solution

AdminOS replaces your entire toolstack with one AI-native platform. Specialised AI agents handle your inbox (over WhatsApp once it is connected), debt recovery, staff wellness, document intelligence, daily business analytics, and outbound email — automatically, 24/7, in your customers' language — plus Langa, an AI business mentor you can ask anything.

One platform, WhatsApp-first by design and app-native today, replacing the 6–8 separate tools most SA SMEs juggle to run their business.

---

The AI Agents + Langa

Agent	Role	Model	What it does
📥 Alex	Inbox Agent	Sonnet	Handles client conversations, FAQs, bookings, escalations (WhatsApp channel pending connection)
💰 Chase	Debt Recovery Agent	Haiku	6-stage debt recovery. The first three stages (courteous reminders) can send automatically; stages 4–6 are drafted for the owner to approve, never auto-sent
🌿 Care	Wellness Agent	Sonnet	Daily staff check-ins, burnout signal detection (planned: no user-facing surface yet)
📄 Doc	Document Intelligence	Haiku	Classifies, summarises, and extracts data from PDF/Word/Excel uploads
📊 Insight	Analytics Agent	Haiku	Daily AI business brief with revenue trends, cash flow, debt aging
✉️ Pen	Email Studio	Sonnet	Drafts professional outbound emails in the tenant's brand voice
🧭 Langa	AI Business Mentor	Sonnet	Ask-anything advisor — strategy, cashflow, pricing, growth, SA business reality

---

Features

Core Platform

• Multi-tenant SaaS — strict per-tenant data isolation with Supabase RLS
• WhatsApp-first by design — connecting each business’s own number is in progress (Meta Tech Provider)
• PWA — installable on Android/iOS. The web app does not work offline yet; the Android staff app queues clock-ins offline
• 14-day free trial — no credit card required

AI Capabilities

• Prompt caching — 80% reduction in Claude API costs via cache_control: ephemeral
• Multi-model routing — Sonnet for nuanced agents (inbox, wellness), Haiku for structured tasks (debt templates, extraction)
• Multilingual — detects and responds in the customer's language automatically
• Prompt injection protection — sanitizeForAI() strips 17 injection patterns on all inbound WhatsApp messages

Business Intelligence

• Real-time analytics — 14-day revenue chart, intent classification, debt aging
• Wellness heatmap — team sentiment over time with burnout signal alerts
• Debt recovery workflow — automatic escalation from reminder → demand letter
• Contract intelligence — extracts key dates, parties, and obligations from uploaded documents

Compliance & Security

• POPIA compliant — right-to-erasure API, immutable audit log, data residency
• Row-Level Security — every table partitioned by tenant_id, enforced at DB level
• Security headers — HSTS, CSP, X-Frame-Options, Referrer-Policy on all responses
• Rate limiting — per-tenant sliding windows via Upstash Redis (5 limiter types)
• Webhook verification — HMAC signature validation on Meta WhatsApp (x-hub-signature-256) and Paystack payment webhooks
• 2FA — not yet available (planned)

Integrations

• 📱 WhatsApp via Meta Business API (Cloud API) — 40+ message templates drafted (lib/whatsapp/templates.ts); Meta approval pending
• 💳 Payments via Paystack (ZAR recurring subscriptions, billed through the Mirembe hub)
• 📧 Email via Resend
• 📊 Accounting via Xero API
• 🔋 Load-shedding widget via EskomSePush API

---

Tech Stack

Layer	Technology
Frontend	Next.js 16 (App Router), React 19, TypeScript, Tailwind CSS 4
AI	Anthropic Claude claude-sonnet-4-6 (Sonnet + Haiku), prompt caching, streaming
Database	Supabase PostgreSQL, Supabase Auth, Row-Level Security
Caching / Rate Limiting	Upstash Redis (sliding window, analytics)
WhatsApp	Meta Business API v19.0, inbound webhook, HMAC-SHA256 verification
Email	Resend API
Accounting	Xero OAuth 2.0 API
Payments	Paystack recurring subscriptions (ZAR) + webhook verification
File Processing	pdf-parse, mammoth (Word), xlsx (spreadsheets)
Automation	Inngest (event-driven workflows), Vercel Cron
Hosting	Vercel Edge + Serverless Functions
Analytics	Vercel Analytics + Speed Insights
PWA	next-pwa, service worker, offline caching
Validation	Zod schemas on all form inputs

---

AI Architecture

Inbound WhatsApp message
        ↓
[Meta Webhook] → [HMAC-SHA256 x-hub-signature-256 verification]
        ↓
[sanitizeForAI()] ← strips 17 injection patterns, 2000-char limit
        ↓
[Supabase: load conversation history + tenant config]
        ↓
[buildSystemPrompt()] ← tenant context, agent personality, KB
        ↓
[Claude API]
  └─ system: [TENANT_PROMPT (cached)] + [AGENT_INSTRUCTIONS (cached)]
  └─ messages: conversation history
  └─ model: claude-sonnet-4-6 (inbox/wellness) | claude-haiku-4-5-20251001 (debt/docs/analytics)
        ↓
[Response saved to DB] → [Meta API v19.0: send reply]
        ↓
[Audit log entry] → [Rate limit check update]

Prompt caching strategy: System prompts (2,000–5,000 tokens) are cached with cache_control: ephemeral, reducing input token costs by ~80% for conversations with tenant context.

Model routing:

const MODEL = {
  inbox_agent:      'claude-sonnet-4-6',  // Customer-facing, needs quality
  wellness_agent:   'claude-sonnet-4-6',  // Emotional nuance required
  debt_recovery:    'claude-haiku-4-5-20251001',   // Template-based
  document_extract: 'claude-haiku-4-5-20251001',   // Structured extraction
  daily_brief:      'claude-haiku-4-5-20251001',   // Summarisation
  analytics:        'claude-haiku-4-5-20251001',   // Data analysis
}

---

Real-Time Features

AdminOS uses Supabase Realtime for live dashboard updates without polling:

Component	Table subscription	What updates
LiveActivityFeed	messages INSERT	New WhatsApp messages appear instantly
RealtimeNotificationBar	conversations UPDATE	Escalation alerts, status changes
AgentStatusBar	workflow_runs INSERT/UPDATE	Agent active/idle state per tenant
Inbox unread count	conversations UPDATE	Badge count on sidebar nav item

How it works:

// Supabase Realtime subscription (tenant-scoped)
supabase
  .channel(`tenant:${tenantId}`)
  .on('postgres_changes', { event: 'INSERT', schema: 'public', table: 'messages',
      filter: `tenant_id=eq.${tenantId}` }, handleNewMessage)
  .subscribe()

RLS policies are enforced on the Realtime channel — a tenant can only subscribe to their own rows.

---

Offline & PWA

AdminOS is a Progressive Web App — installable on Android and iOS home screens, with offline resilience for South Africa's load-shedding reality.

Service worker cache strategy (next-pwa):

Route type	Strategy	Behaviour during outage
Dashboard pages	NetworkFirst (5s timeout)	Shows last-cached version
Static assets (/_next/static)	CacheFirst	Served from cache instantly
API routes (/api/*)	NetworkOnly	Fails gracefully with offline toast
Fonts & icons	StaleWhileRevalidate	Instant load, background refresh

Manifest (/public/manifest.json):

• Theme colour: #0A0F2C (AdminOS navy)
• 3 quick-launch shortcuts: Inbox, Contacts, Analytics
• Installable on Android Chrome, iOS Safari, and desktop

Load-shedding widget: EskomSePush API integration at /dashboard shows next scheduled outage time, so business owners can plan AI-dependent tasks around power availability.

---

Cron Jobs

Schedule (UTC)	SAST	Route	Purpose
0 3 * * 1-5	05:00	/api/cron/daily-brief	Generate AI business brief per tenant
0 */6 * * *	every 6h	/api/cron/debt-recovery	Debt recovery on overdue invoices
0 7 * * 1,3	09:00 Mon/Wed	/api/cron/wellness	Staff wellness check-in messages
0 5 * * 1-5	07:00	/api/cron/fan-out-brief	Fan-out brief generation across Inngest workers
0 6 * * 1-5	08:00	/api/cron/fan-out-wellness	Fan-out wellness check-ins across workers
* * * * *	every min	/api/cron/process-queue	Drain workflow_queue table → Inngest events
*/15 * * * *	every 15 min	/api/cron/escalate-conversations	Escalate unresolved WhatsApp conversations

---

Pricing

Simple, Rand-priced monthly plans on Paystack. 14-day free trial — no card required.

Tier	Price / month	Best for
Solo	R349	Owner-operators & side hustles
Grow ⭐	R899	Small teams finding their feet
Operate	R1,999	Established SMEs running daily ops
Scale	R3,999	Multi-staff businesses at volume
Partner	R9,999	Agencies, resellers & multi-tenant partners

Add-ons: Ring (voice) R999 · Reach (extra WhatsApp reach) R499 · Client Portal R599 · Sage Sync R299 · Extra Languages R199.

---

POPIA Compliance

AdminOS is built to comply with South Africa's Protection of Personal Information Act (POPIA, No. 4 of 2013):

• Lawful processing basis — documented in Privacy Policy
• Data minimisation — only business-necessary data collected
• Right-to-erasure API — DELETE /api/compliance/delete-contact
• Immutable audit trail — every data access/modification logged with timestamp + user ID
• Multi-tenant RLS — physical data separation enforced at database level
• Retention schedules — configurable per tenant, enforced by cron cleanup
• Information Officer — designated contact: [email protected]

---

Local Development

# Clone
git clone https://github.com/Nanda-Regine/AdminOS
cd AdminOS/adminos

# Install
npm install

# Environment variables
cp .env.local.example .env.local
# Fill in all required keys — see .env.local.example for full list
# Required: NEXT_PUBLIC_SUPABASE_URL, NEXT_PUBLIC_SUPABASE_ANON_KEY,
#           SUPABASE_SERVICE_ROLE_KEY, ANTHROPIC_API_KEY,
#           UPSTASH_REDIS_REST_URL, UPSTASH_REDIS_REST_TOKEN,
#           META_WHATSAPP_ACCESS_TOKEN, META_PHONE_NUMBER_ID, META_WEBHOOK_SECRET,
#           RESEND_API_KEY, INNGEST_EVENT_KEY, INNGEST_SIGNING_KEY

# Apply database migrations
npx supabase db push

# Seed required tables (run once in Supabase SQL editor)
# See supabase/seed.sql — creates business_insights, subscriptions tables
# and inserts default plan limits for starter/growth/enterprise/white_label

# Start Next.js dev server
npm run dev

# In a separate terminal: start Inngest dev server (required for background jobs)
npx inngest-cli@latest dev
# Open http://localhost:8288 to inspect Inngest events and function runs

---

Deployment

AdminOS is deployed to Vercel with zero-config from main branch:

# Production deploy
vercel --prod

# Environment variables (set in Vercel dashboard or CLI)
vercel env add ANTHROPIC_API_KEY production
vercel env add SUPABASE_SERVICE_ROLE_KEY production
# ... etc

Required Supabase tables (run migrations before first deploy):

• tenants, users, conversations, messages, contacts
• invoices, debtors, documents, staff, wellness_records
• workflow_runs, audit_logs, subscriptions, business_insights

---

Project Structure

adminos/
├── app/
│   ├── page.tsx                    # Landing page
│   ├── layout.tsx                  # Root layout (metadata, analytics)
│   ├── (auth)/login|signup         # Auth pages
│   ├── dashboard/                  # Protected dashboard routes
│   │   ├── inbox/                  # WhatsApp conversation inbox
│   │   ├── analytics/              # Business intelligence
│   │   ├── contacts/               # CRM
│   │   ├── documents/              # Document management
│   │   ├── invoices/               # Invoice tracking
│   │   └── settings/billing|compliance|referrals
│   ├── api/
│   │   ├── agents/[agentType]/     # Claude API proxy per agent
│   │   ├── billing/checkout|webhook
│   │   ├── cron/                   # Scheduled automation
│   │   ├── documents/upload        # File processing
│   │   └── webhook/whatsapp|email  # Inbound webhooks
│   ├── privacy/                    # Privacy Policy (POPIA)
│   ├── terms/                      # Terms of Service
│   └── contact/                    # Contact page
├── lib/
│   ├── ai/agents.ts                # Server-side Claude agents
│   ├── ai/agents.config.ts         # Client-safe agent config
│   ├── ai/buildSystemPrompt.ts     # Prompt construction with caching
│   ├── security/sanitize.ts        # Prompt injection protection
│   ├── security/rateLimit.ts       # Upstash rate limiting
│   ├── security/audit.ts           # Immutable audit logging
│   ├── workflows/debtRecovery.ts   # Debt recovery workflow
│   ├── workflows/wellness.ts       # Wellness check-in workflow
│   └── whatsapp/send.ts            # Meta Business API v19.0 send utility
├── components/
│   ├── CookieConsent.tsx           # POPIA-aware cookie banner
│   └── dashboard/Sidebar|TopBar
├── middleware.ts                   # Auth, trial enforcement, security headers
└── next.config.ts                  # PWA, CSP, HSTS, image optimisation

---

Roadmap

• Sage / QuickBooks integration — many SA SMEs are on Sage
• Voice note processing — Whisper API for WhatsApp voice messages (very SA)
• Automated payroll reminders — cron on 25th, auto-draft payslip notices
• Insurance document processor — CIPC, compliance certificate handling
• Calendar integration — Google Calendar sync for scheduling
• Multi-location Enterprise — franchise and multi-branch support
• Mobile app — React Native (PWA covers most use cases already)

---

About

Built by Nandawula Regine Kabali-Kagwa | Mirembe Muse (Pty) Ltd

African-built, African-first. AdminOS is what happens when you stop trying to adapt international SaaS tools to African business realities and build from scratch for how SA businesses actually work: WhatsApp-first, multilingual, load-shedding-aware, POPIA-compliant, and priced for SME budgets.

Contact: [email protected] Demo: cal.com/nanda/adminos-demo Live: adminos.co.za

---

AdminOS · March 2026 · Mirembe Muse (Pty) Ltd · South Africa