Enterprise Directory

Complete Features & Capabilities Overview

220+ Professional Features | 🇪🇺 GDPR Compliant
220+
Total Features
40+
Feature Categories
30+
API Endpoints
🇪🇺
GDPR Compliant
All Features
Core Features
Security
API
User Interface

🔐 Authentication & Authorization

JWT-based authentication with access and refresh tokens
Password hashing with bcrypt (10 rounds)
30-minute access token expiration, 7-day refresh token
Secure login and logout functionality
Password change capability
Token refresh mechanism
Multi-factor authentication (MFA) support
Session management with device tracking
Role-based access control (Admin, Editor, Viewer)
Permission-based operation restrictions

📁 Directory Management (CRUD Operations)

Create new directory entries with all required fields
Read/view single directory entry by ID
List all directory entries with pagination
Update existing directory entries
Soft delete directory entries (recoverable)
Restore soft-deleted directory entries
Permanent deletion capability
Auto-generated sequential index numbering
Company name autocomplete from existing entries
Record group autocomplete from existing entries

🔍 Search & Filtering

Multi-field search across all directory fields
Filter by company name (entreprise)
Filter by record status (active/deleted)
Filter by email address
Filter by record group
Advanced search with multiple criteria
Case-insensitive search functionality
Pagination with customizable page size (max 100 per page)

👥 System User Management

Create new system users (Admin, Editor, Viewer roles)
List all system users with details
Update system user information
Edit user roles (promote/demote)
Activate/deactivate system users
Delete system users
View user last login timestamps
Track user creation and modification

🔑 API Key Management

Create API keys with custom permissions
Generate secure 256-bit cryptographic keys (sk_ prefix)
Granular permission levels (Read, Write, Delete, Admin)
View all API keys with usage statistics
Edit API key permissions and settings
Update rate limits dynamically
Activate/deactivate API keys instantly
Revoke/delete API keys permanently
One-time key display during creation
Copy-to-clipboard functionality for API keys
SHA256 hashing for secure key storage
IP whitelisting for restricted access
Configurable expiration dates
Rate limiting (per-hour and per-day limits)
Usage tracking (total requests, last used timestamp)
Partner name and description fields
Frontend interface for complete API key CRUD

📊 API Key Permissions System

Read Permission: List and view directory entries only
Write Permission: Create, update, and read directory entries
Delete Permission: Full CRUD including soft delete and restore
Admin Permission: Complete system access including admin operations
Permission hierarchy enforcement (read ⊂ write ⊂ delete ⊂ admin)
API key authentication via X-API-Key header
Permission validation on every request

📝 Audit Logging

Complete audit trail for all operations
Track CREATE, READ, UPDATE, DELETE, SOFT_DELETE operations
Log LOGIN, LOGOUT, LOGIN_FAILED events
Record API_CALL activities
Store user information (ID, email) for each action
Capture IP addresses and user agents
Record old and new values for updates
Track changes with detailed JSONB fields
Filter audit logs by action type
Filter by table name
Filter by user ID
Filter by date range (start_date, end_date)
View personal activity logs (My Activity)
Admin-only access to full audit logs
Automatic audit logging via database triggers

📈 Statistics & Analytics

Real-time total record count
Active users count
Deleted users count
Total system users count
API key usage statistics
Total requests per API key
Successful vs failed requests
Average response time tracking
Last request timestamp
Endpoint usage breakdown

🎨 Frontend Interface

Modern, responsive single-page application
Clean and intuitive user interface
Login page with authentication
Directory table view with sortable columns
Pagination controls
Advanced search section
Create/Edit user modals
Delete confirmation dialogs
Real-time statistics dashboard
Admin panel for system user management
API Key management interface
Audit log viewer
CSV export functionality
Role-based UI element visibility
User profile display with avatar
Logout button
Toast notifications for actions
Loading spinners and states
Mobile-responsive design
Footer with privacy policy, terms, server status
Company logo display
Autocomplete inputs for company and record groups

🔒 Security Features

Bcrypt password hashing with 10 rounds
JWT token-based authentication
API key authentication for third-party access
Cryptographic API key generation (256-bit)
Secure API key storage (SHA256 hashing)
Rate limiting (100 requests per 15 minutes globally)
Per-API-key rate limiting (configurable)
CORS configuration with whitelist
Helmet.js security headers
Input validation with express-validator
SQL injection prevention via Supabase RLS
XSS protection
Row Level Security (RLS) policies
IP whitelisting for API keys
Automatic key expiration
Instant key revocation
Session expiration and cleanup
Secure password validation (minimum 8 characters)

🌐 API Endpoints

RESTful API design with versioning (/api/v1/)
30+ API endpoints
Authentication endpoints (login, logout, refresh, change password)
Directory CRUD endpoints with filtering
Admin user management endpoints
Audit log query endpoints
API key management endpoints
API usage statistics endpoints
Health check endpoint
Consistent JSON response format
Proper HTTP status codes
Error handling with descriptive messages

🇪🇺 GDPR Compliance & Data Protection

All data stored within EU (Frankfurt, Germany & Belgium)
No data transfers outside European Union
Complete Privacy Policy (GDPR Articles 13-14 compliant)
Comprehensive Terms of Service (Belgian law)
Cookie consent banner with accept/reject options
Right to access - View and export your personal data
Right to rectification - Update your information directly
Right to erasure ("Right to be Forgotten")
Right to data portability - Export in JSON/CSV format
Right to restrict processing
Right to object to processing
Right to withdraw consent at any time
Right to lodge complaint with Belgian DPA
Data Processing Agreements with Supabase and GCP
Transparent data retention policies (documented)
Data breach notification procedures (72-hour compliance)
Privacy by design architecture
Encryption at rest and in transit (TLS/HTTPS)
Row-level security (RLS) policies
No tracking or advertising cookies
Belgian Data Protection Authority contact information provided
Legal basis for processing documented
Subject Access Request (SAR) procedures

✅ GDPR Phase 1 Implementation Complete (100%)

📄 Read Full Phase 1 Report

View detailed implementation status, compliance scores, and next steps

Additional Capabilities

🗄️ Database Features 14

  • PostgreSQL via Supabase
  • Soft delete functionality
  • Row Level Security policies
  • Automatic triggers
  • UUID primary keys
  • Indexed fields for performance

📤 Export & Import 5

  • CSV export of directory
  • Filtered export
  • All fields included
  • Proper CSV formatting
  • Downloadable files

🚀 Deployment 11

  • Dockerized application
  • Google Cloud Run
  • Auto-scaling containers
  • GitHub CI/CD integration
  • Production-ready
  • Health monitoring

📱 User Experience 22

  • Auto-populated fields
  • Autocomplete inputs
  • Inline help text
  • Form validation
  • Loading states
  • Success/error notifications

🔧 Technical Stack 16

  • Node.js 18 runtime
  • Express.js framework
  • JWT authentication
  • Winston logger
  • Docker containers
  • Environment-based config

📊 Monitoring 10

  • Health check endpoint
  • Real-time log streaming
  • Cloud Run metrics
  • Error tracking
  • Performance metrics
  • User activity monitoring

💡 Business Features 9

  • Multi-tenant support
  • Hierarchical access control
  • Location tracking
  • External partner integration
  • Usage-based billing ready
  • Compliance-ready audits

🔄 Real-Time Features 8

  • Live statistics updates
  • Instant key activation
  • Real-time search results
  • Immediate delete/restore
  • Live usage stats
  • Current session tracking
↑