TrueBloom

Legal Practice Management

In-house

End-to-end CRM for legal firms. Client onboarding, KYC verification, company management, invoicing, and compliance — all in one place.

Full Audit Trail

Every action logged with who, what, and when. Git-style diffs for complete change history. Compliance-ready from day one.

Multi-Tenant

Complete data isolation between organizations. Row-level security ensures clients never see each other's data.

Passwordless Auth

One-time codes via email. No passwords to forget, no credentials to leak. Device tracking and session limits built in.

Client Self-Service

Clients upload documents, check status, and view invoices through their own portal. Less email, fewer calls.

The Problem

Legal firms drown in spreadsheets, emails, and manual processes.

Client onboarding takes weeks. Documents get lost in email threads. KYC verification is a mess of PDFs and follow-up calls. Nobody knows which company needs what, and when the annual fee was last paid. Auditors ask questions, and the answers are scattered across three systems and someone's personal notes.

We built this system because we lived this chaos. Now everything is in one place, searchable, auditable, and actually usable.

Core Modules

Client Management

Centralized client database with full contact history, document attachments, and service records. Filter by status, tags, or custom fields. See everything about a client in one screen.

  • Client profiles with full contact history
  • Status tracking (Pending, Active, Suspended, Archived)
  • Custom tags and categorization
  • Role-based visibility (private/shared clients)

Business Impact

No more searching through emails or shared drives. Every client interaction is logged and searchable. Handoffs between team members are seamless because the full context is always available.

KYC Verification

Multi-stage verification workflows. Send clients a secure link, they upload documents, you review and approve. No email attachments, no manual tracking, no lost files.

  • Verification levels (Basic, Regular, Extended, Custom)
  • Token-based secure upload links
  • Document versioning with full history
  • Rejection workflow with reason tracking
  • Auto-expiring links for security

Business Impact

KYC used to take 2-3 weeks of back-and-forth emails. Now it's done in days. Clients get a link, upload their documents, and you review everything in one dashboard. Audit trail is automatic.

Company Management

Full corporate structure tracking. Shareholders with ownership percentages, directors, secretaries, beneficial owners. Bank accounts, documents, annual fees — everything connected.

  • Shareholder registry with ownership %
  • Contact persons (Directors, Secretaries, UBOs)
  • Bank account management (IBAN, SWIFT)
  • Document storage with versioning
  • Transfer history and lifecycle tracking

Business Impact

No more digging through folders to find who owns what. Corporate structure changes are tracked automatically. When regulators ask about beneficial ownership, you have the answer in seconds.

Invoicing & Expenses

Create invoices, track payments, manage expenses. Clients view and pay through their portal. See who's overdue at a glance. Export for accounting.

  • Invoice types (Registration, Annual Fee, KYC, Consultation)
  • Status tracking (Draft, Sent, Paid, Overdue)
  • PDF generation and download
  • Client portal invoice viewing
  • Expense tracking against clients/companies

Business Impact

Stop chasing payments manually. Dashboard shows exactly who owes what. Clients see their invoices in the portal. Revenue reporting is one click away.

Workflow Tools

Kanban Boards

Drag-and-drop workflow management. Create boards for onboarding, company formation, annual renewals. Link cards to clients and companies.

Calendar Integration

Track deadlines, meetings, and renewals. iCalendar feed generation for syncing with your existing calendar app.

Journal Dashboard

Real-time feed of all system activity. Filter by client, company, author, or date. See exactly what happened and when.

Role-Based Access

Six access levels from Platform Admin to Client. Employees see only what they need. Managers control their teams.

Device Management

Track logged-in devices per user. Limit concurrent sessions. Get notified when someone logs in from a new device.

Tenant Settings

Per-organization configuration. KYC expiration rules, default currency, auto-reject timings. Each firm works their way.

Compliance & Security

Built for audits. Ready for regulators.

Event sourcing architecture means nothing is ever deleted. Every change creates an immutable record. When auditors ask "who changed this and when?" — you have the answer.

Immutable Audit Log

Append-only event store. Records can be added but never modified or deleted. Complete accountability.

Git-Style Diffs

See exactly what changed between versions. Field-by-field comparison. Old value → new value, timestamped.

Row-Level Security

PostgreSQL RLS ensures tenant isolation at the database level. Even if application code has bugs, data stays protected.

Isolated Storage

Per-organization S3 buckets. Documents from different tenants are physically separated. Presigned URLs for secure access.

Brute-Force Protection

Rate limiting on authentication. Account lockout after failed attempts. IP tracking and suspicious activity alerts.

Session Limits

Maximum 2 concurrent sessions per user. New login kicks out oldest device. Email notification for new device access.

Access Control

Role Scope Capabilities
Platform Admin System-wide Tenant creation and management, system configuration
Super Admin Organization Full access to all organization data and settings
Admin Organization User management, system administration
Manager Assigned data Full CRUD on clients, KYC, companies, documents
Employee Assigned data View-only access to managed data
Client Own data Personal profile, assigned services, document upload

Built With

React 19 React Router 7 (SSR) TypeScript 5.9 Tailwind CSS 4 PostgreSQL 16 Prisma 6 MinIO (S3) Vitest Playwright
In-house Solution

Built for our own legal practice.

This isn't a SaaS product we're selling — it's the system we use every day to run a real legal services business. We built it because nothing on the market did what we needed. Now it handles hundreds of clients, thousands of documents, and passes every compliance audit.

Interested in a similar solution for your firm? .