TalentQuote-Tech-Stack-and-Migration-Plan-2025-2027

⸻

🎯 Strategy in One Line

Launch fast on Webflow + Wized + n8n + Supabase, keep Airtable as the internal cockpit, Cloudflare as the global front door. Only consider a React rebuild if KPIs demand it. Everything is API-first and versioned so the UI can change without touching the brain.

⸻

⚙️ Core Tech Stack (Authoritative)

🌐 Frontend (client-facing) • Webflow + Wized for MVP & v2 dashboards (blurred previews, shortlist, interviews, SOW, billing). • Cal.com embedded for scheduling. • Stripe Checkout/Portal embedded for payments. • DocuSign embedded for MSA/SOW signing. • Cloudflare Stream for candidate videos.

🧠 Orchestration & Automations • n8n (self-hosted) as the automation brain (webhooks, jobs, alerts, data sync). • OpenAPI v1 contracts for every flow exposed by n8n (stable interfaces).

🗄️ Data & Auth • Supabase (PostgreSQL + Auth + Storage + Realtime) as system of record. • Row-Level Security for multi-tenant safety. • Supabase Storage for docs (signed MSAs/SOW PDFs) if you don’t store them in DocuSign vault.

🧑‍💼 Internal Ops (Recruiter/Admin) • Airtable as the recruiter + admin cockpit (Clients, Roles, Candidates, Invoices, Contracts). • Slack for alerts & weekly summaries (via n8n). • PostHog for product analytics and funnels.

🌍 Edge, DNS & Security • Cloudflare for DNS, SSL (Full Strict), WAF, CDN caching. • Optional Cloudflare Pages for static microsites & Onikom marketing if exporting from Webflow.

🧩 Integrations • Stripe (subscriptions, buyouts, dunning). • DocuSign (MSA/SOW, webhook back to n8n). • Wise (optional payouts, 2026+). • Gmail/Outlook (notifications via n8n nodes).

⸻

🗺️ Architecture (Text Diagram)

Users → 🌍 Cloudflare (DNS + WAF + CDN) → 🌐 Webflow + Wized (client portal) → 🔁 n8n /v1 (webhooks + business logic) → 🗄️ Supabase (Auth + Postgres + Storage) → 💳 Stripe • 📝 DocuSign • 📅 Cal.com • 📹 Cloudflare Stream

Recruiters/Admin → 📋 Airtable (linked bases & views) ↔ 🔁 n8n (two-way sync with Supabase, Stripe, DocuSign) → 🔔 Slack (alerts, weekly rollups) → 📈 PostHog (behavior analytics)

⸻

🔐 Security & Compliance (baked-in) • Cloudflare WAF + SSL Full Strict. • Supabase RLS multi-tenant rules; JWT on the client; service role key only in n8n. • n8n secrets in env variables; no creds in nodes. • Stripe & DocuSign webhooks validated (idempotency + signature checks). • Watermarked PDFs with client org + timestamp. • Backups: Supabase automated + nightly export to S3 (or Supabase backups). • PII minimization: recruiter cockpit stores only necessary fields; signed docs in secure storage.

⸻

🛣️ Migration Roadmap (Quarter by Quarter)

🚀 2025 H1 — Phase 1 (MVP Go-Live) • Rebuild Onikom LLC site on Webflow; move DNS from Plesk → Cloudflare (nameservers). • Stand up n8n (Render/Railway or VPS). • Create Supabase project; define RLS; set up Storage buckets (docs/videos if needed). • Create Airtable bases: Clients, Roles, Candidates, Contracts, Invoices. • Implement OpenAPI v1 endpoints in n8n (read/write shortlist, interviews, hire, payments, buyout). • Launch Webflow + Wized client portal (blurred previews → MSA → shortlist → interview → SOW+prepay → onboarding). • Webhooks wired: Stripe, DocuSign, Cal.com → n8n → Supabase/Airtable. • Add PostHog events: viewed_candidate, booked_interview, paid_invoice, buyout_completed.

Success gates: first 5–10 active seats, <7-day onboarding p50, working collections.

⸻

⚡ 2025 H2 — Phase 1.5 (Stabilize & Prove) • Add dunning & collections flows in n8n (failed payment → reminders → Slack escalation). • Weekly Admin Rollup (Slack message): MRR, seats, pending invoices, upcoming renewals. • Improve shortlist quality signals (psychometric + match % via OpenAI scored in n8n). • Add replacement guarantee timer logic and alerts. • Harden analytics (cohorts, funnel drop-offs in PostHog). • Optional: Export webflow marketing to Cloudflare Pages for speed/cost (if desired).

Success gates: 20+ seats 60+ days, time-to-interview <48h p50, collections <3% delinquency.

⸻

🔁 2026 H1 — Phase 2 (Scale Without Rebuild) • Keep Webflow + Wized for all client UX. • Deepen Airtable: Admin views (Renewals, Overdues, Replacements), Recruiter Kanbans, Calendar for interviews. • Add Wise payouts if needed; sync to Airtable for finance visibility. • Introduce data contracts: freeze OpenAPI v1; add v1.1 only if required (non-breaking). • Add forecasting v1 in n8n (simple heuristics + scores stored in Supabase). • Tighten observability: n8n run logs → Slack alerts for failures; uptime monitoring (Uptime Kuma). • Set up staging: duplicate Supabase project + n8n instance; test before prod.

Success gates: 40–60 seats sustained, <5% logo churn, stable automations.

⸻

📈 2026 H2 — Phase 2.5 (Performance & Data) • Optimize Wized performance (caching rules in Cloudflare; lazy videos; CDN headers). • Build exec dashboards in Airtable (or Notion synced from n8n): ARR, seats, buyouts, replacement rates. • AI: add embedding-based candidate search (store embeddings in Supabase pgvector). • Optional: microservice for AI (if heavy); still orchestrated by n8n. • Strengthen access controls: separate service keys per environment; rotate secrets quarterly.

Decision checkpoint: Only plan a React migration if (a) external SMB self-serve is real, (b) you need multi-tenant component logic that Wized can’t handle, or (c) investors require a codebase posture.

⸻

🧭 2027 — Optional Phase 3 (React App only if needed) • If green-lit: keep all APIs & n8n the same; replace only the UI. • Anima + Plasmic for Figma-to-React; Vercel for CI/CD + edge; Cloudflare remains DNS/WAF. • Strangler pattern: route specific pages to app subdomain; gradually cutover. • Reuse OpenAPI v1; no backend rewrites. • Keep Airtable for ops even after React app arrives (no need to replace what works).

If not needed: continue compounding on Webflow + Wized with the same automation brain and database. The stack remains lean, cheap, and effective.

⸻

🧩 OpenAPI v1 (Endpoints to Freeze) • POST /v1/auth/login, POST /v1/auth/register (delegates to Supabase). • GET /v1/shortlists?client_id=… • POST /v1/interviews (create booking, fire Cal.com) • POST /v1/hires (lock engineer, create SOW, create Stripe invoice/subscription) • POST /v1/payments/webhook (Stripe → status update) • POST /v1/docusign/webhook (agreement status + file link) • GET /v1/engineers?status=available • POST /v1/buyout (calculate fee, create DocuSign + Stripe link)

All implemented in n8n; all reading/writing Supabase; side-effects to Airtable for ops visibility.

⸻

🔄 CI/CD Culture (No React Required) • GitHub repo for: n8n workflow JSON, OpenAPI spec, SQL migrations, Webflow exports (if needed). • Staging → Prod promotion checklists in PRs. • Automated deploys for n8n (Render/Railway deploy hooks) on tag. • Supabase migrations versioned; run in staging first. • Incident playbook: rollback n8n version, feature flags in Wized, DNS toggles in Cloudflare.

⸻

🪙 Cost & Ops (Lean Defaults) • Cloudflare (free/Pro), Webflow (site + CMS plan), Wized (pro), Supabase (pro), n8n (Render/Railway/VPS), Stripe/DocuSign (usage), PostHog (startup plan), Airtable (team plan). • Infra under $1–2K/mo until seat count grows; mostly pay-as-you-grow.

⸻

🛡️ Risks & Mitigations • Vendor drift (Wized limits): lock OpenAPI; keep flows simple; pre-decide React cutover criteria. • Automation failures: retry with exponential backoff in n8n; dead-letter Slack alerts. • Data integrity: single-source-of-truth = Supabase; Airtable treated as ops UI; nightly reconciliation job. • Collections: dunning flows + Slack escalations; Wise payouts gated by invoice status. • Security: quarterly key rotation; principle of least privilege; audit logs in Supabase.

⸻

✅ 30/60/90 Day Action List

Next 30 days • Move all domains to Cloudflare (DNS + SSL Full Strict). • Stand up n8n + Supabase + Airtable bases. • Freeze OpenAPI v1 and stub endpoints. • Rebuild Onikom LLC site on Webflow (US narrative, link to TalentQuote).

Day 31–60 • Wire Webflow + Wized to n8n & Supabase. • Stripe & DocuSign live with webhooks. • PostHog events; weekly Slack rollup.

Day 61–90 • Launch MVP; measure TTI (<48h) & TTS (≤7 days). • Add dunning; add replacement guarantee timers. • Stabilize recruiter & admin Airtable views.

⸻

🏁 Final Word

This plan keeps you fast, cheap, and data-correct now—while preserving a clean, low-risk path to a React app later only if the business truly needs it. n8n is the brain, Supabase is the truth, Webflow/Wized is the face, Airtable is the cockpit, Cloudflare is the shield.