Legal-Tech Review
Document review platform
- Role
- Full-Stack Developer
- Context
- Tekab.dev
- Period
- 2023
- Live
- app.legalst.fr ↗
01 — Overview
A secure platform for reviewing legal documents, with annotations and fine-grained permissions.
The challenge
Sensitive legal data: every access must be justified, logged and protected, and the system must survive an external security audit.
Stack
- Nest.js
- PostgreSQL
- TypeScript
- RBAC
- PDF annotations
02 — Architecture
What I built, layer by layer.
- ■ Interface
- ■ API & logic
- ■ Data
- □ Cloud & delivery
- ■ Quality & security
- InterfaceReview dashboardAPI & logicNest.js REST API
- API & logicNest.js REST APIDataPostgreSQL
- API & logicNest.js REST APIQuality & securityMonitoring
- Quality & securityStagingAPI & logicNest.js REST API
- Interface
- Document review dashboard with dynamic tables and PDF annotations.
- API & logic
- Nest.js REST API, authentication, role-based access, CSRF/XSS protection.
- Data
- PostgreSQL schema and access policies, versioned migrations, indexes, transactions, EXPLAIN tuning.
- Quality & security
- Error tracking, logs, alerts, incident handling; security audit fixed and retested.
03 — What I did
- 01
Built the Nest.js REST API, authentication and PostgreSQL data layer, with role-based access control and CSRF/XSS protection.
- 02
Designed the PostgreSQL schema and access policies, with versioned migrations, indexes, transactions and query-plan (EXPLAIN) tuning.
- 03
Set up error tracking, logging and alerts, handled production incidents, and prepared a staging environment for a security audit, then fixed the confirmed findings and supported the retest.
- 04
Built the document review dashboard with dynamic data tables and PDF annotations.
04 — Results
Security audit findings fixed and retested
On a phone · same build, live site
