Kaazii
Enterprise multi-tenant project management and HR platform with PostgreSQL schema isolation, Django REST Framework, and Next.js 16.
Key Verified Outcomes
Live System Walkthrough & Demonstration
Visual walkthrough of core application features, system architecture, and performance.
The Architectural Challenge
Architected and engineered Kaazii, a state-of-the-art multi-tenant enterprise project management and HR operations platform. Built with Django REST Framework backend and Next.js 16 (App Router) frontend, featuring schema-isolated PostgreSQL multi-tenancy, JWT RS256 asymmetric authentication, Redis WebSocket channels for live sprint collaboration, organizational hierarchy trees, blocker tracking, and granular RBAC module permissions.
Engineering Execution & Deep Dive
Multi-tenant enterprise operations demand absolute tenant data isolation without compromising query speed or real-time reactivity. We designed a dual-tier PostgreSQL schema structure for Kaazii separating global tenant registries from isolated organizational schemas (schema_{org_code}). The Next.js 16 App Router dashboard leverages Turbopack, TanStack Query v5 with optimistic UI updates, and strict Zod runtime validation schemas. Real-time task progress, blocker alerts, and sprint burndowns are broadcast through Redis-backed Django Channels over WebSockets. S3-compatible document storage was implemented using MinIO with asymmetric JWT RS256 signatures securing inter-service requests.
Core Technical Features:
- PostgreSQL schema-based multi-tenancy enforcing complete data isolation per organization (Users, Projects, Sprints, Tasks, Attendance).
- Next.js 16 App Router frontend with Turbopack, TanStack Query v5, custom design tokens, and Phantom UI skeletons.
- Real-time sprint planning, backlog management, timelogging, and blocker dependency tracking via Redis WebSocket channels.
- Hierarchical HR management module with organizational trees, attendance logs, and leave approval workflows.
- Granular Role-Based Access Control (RBAC) with module-level permission enforcement and workspace switching.
- MinIO S3-compatible object storage for secure multi-tenant attachment and artifact handling.
- Comprehensive Docker Compose orchestration and automated Lefthook Git hooks (Pytest, Ruff, Biome, TypeScript).
Security Hardening & VAPT
- ✦Cryptographic tenant boundary enforcement via PostgreSQL dynamic search paths based on validated X-Org-Code headers.
- ✦RS256 asymmetric signature JWT verification ensuring tamper-proof user claims and privilege validation.
- ✦Automated quality gate pipelines enforcing static analysis, linting, and 100% type safety before commit and push.