DEMOSOFT / React / FastAPI / PostgreSQL / Kotlin

SpeedCredit — loan and leasing management

Version commercial-preparation · FalcoSoft

SpeedCredit is a modular lending and leasing software project with a public website, isolated client portal, private administrator workspace and native Android app. SpeedCredit.uk is the demonstration; the public administrator preview is read-only and uses fixed synthetic examples. 1. CLIENT WORKSPACE Clients can enter a supplied account or create a separate synthetic demo profile, manage display name/city/test occupation, change a known password, sign out and choose light/dark/system themes. Server-side ownership checks isolate their records. The calculator shows amount/term, installment, principal, interest, fees, total and APR, with a six-month demo minimum. Clients submit personal or linked-company test applications and follow operator-reviewed states. No automatic credit approval is performed. Servicing includes current balances, principal/interest, next installment, arrears/days, schedule allocations, partial/advance demo payments and an explicitly limited illustrative early-close model. Clients access authenticated PDF schedules, new-operation receipts, annex versions and linked company/lease documents. Applications include a demo NRA-process choice and, after operator approval, bank IBAN or EasyPay cash selection. IBAN/bank-code validation and same-bank company-account routing are prepared; real inquiries and transfers are disabled. Linked companies and leases display assets, weekly/monthly schedules, upfront/balloon amounts and PDF plans. Clients can opt into the internal simulated reminder inbox at D-3, D0 and D+1 during 09:00–19:00 Sofia hours. Support tickets contain an isolated append-only conversation; replying can reopen a resolved ticket. No external email/SMS is sent from the inbox/help workflow. 2. ADMINISTRATOR WORKSPACE The private owner reviews clients/applications, information requests and demo decisions; the public administrator preview cannot perform these operations. Current portfolio/arrears reports and CSV are available. A shared web/Android servicing register uses integer cents, idempotency and stale-version checks. Annex proposals preserve original schedules and become stale after intervening mutations. Penalty policies are drafts and do not accrue charges in the demo. Party profiles include representative/address, linked borrower and versions. Leasing supports assets, exclusive activation/reservation, weekly/monthly illustrative ACT/365 schedules, down payment and balloon. A worker creates only due invoice drafts and deduplicates installment links; it does not issue real tax invoices. Sales include catalog, multi-line invoice/proforma drafts, credit/debit notes, quantities, configurable test tax, per-line rounding, fixed demo numbers and party snapshots. Signed receipts/reversals determine outstanding balances. Real tax issuance/reporting is not enabled. Cash desks support sessions, funding/expense, linked loan/sale receipts, immutable signed entries, balances, PDF vouchers and explicit closing reconciliation. Linked loan/cash writes commit or roll back together. Automatic loan reversals are limited to the supported latest mutation. Fiscal hardware is unconnected. Collections provide dated tasks, encrypted history, contact/promise/legal-review/judicial-demo stages and document references, with closed-case retention. No real legal action is initiated. Management reports separate current portfolio/cash from selected-period activity, retain reversal signs and avoid double-counting linked cash/loan receipts. Frozen 1–12-month liquidity scenarios retain assumed rates, budgets, reserves, source versions and hashes. Operator bonuses are simulations, without payroll/payout. Historical collection performance, profit and bank balances are not inferred. Support, editor and read-only analyst roles have fixed API permissions. Staff invitations expire after 48 hours and require personal password/TOTP activation. Owners can suspend/resume non-owner accounts and revoke sessions while retaining history. The plain-text CMS covers two informational blocks with draft/publish/hide/copy-as-new versioning; editors cannot change credit products or legal texts. A 15-area readiness register stores responsibilities, references, expiry and encrypted history, plus frozen hash-verified review bundles. Owner-entered review is not automatic legal approval and never enables lending. 3. EXTERNAL API INTEGRATIONS: ACTUAL BOUNDARY BNB/CCR: preparation panels, protected configuration and inquiry tasks; current internal demo reporting snapshots, corrections and hashes. Real institutional transport, official adapter, historical period-end data and acceptance are pending. Internal JSON/CSV is not an official submission file. NRA: protected configuration, borrower choice and synthetic income/employment workflow. No universal creditor API has been verified/implemented. The buyer must obtain its permitted process, specification and access. Customer PICs/private signing keys are not collected in the demo. SMSAPI.bg: sender/token configuration, editable templates, parts estimate, daily limits, outbox, event deduplication, test outcomes and authenticated delivery callbacks. Simulation/provider-test mode is active. Live sending requires the buyer’s provider account, approved sender, verified recipients and acceptance. Banks/EasyPay: bank register, company accounts, borrower destination and demo instruction preparation. Actual disbursement, repayment transport, reconciliation and EasyPay require contracts/adapters. KYC, e-signing, virtual POS and fiscal devices are not connected. The web/native clients share the application API with ownership checks; this does not imply connected third-party services. 4. ANDROID, SECURITY AND EXTRAS Native Kotlin/Compose Android 0.2.0-demo provides dashboard, servicing/partial demo payments, applications, NRA choice, approved-destination selection, PDFs, reminders, help and linked-business views. Android 8+, no WebView or contact/media/location/SMS permissions; Keystore session encryption and private-cache PDF opening. Staff administration stays on the website. React/TypeScript, FastAPI/SQLAlchemy and deployed PostgreSQL; Argon2id passwords, TOTP, encrypted protected fields/credentials, CSRF/Origin checks, rate limits, audit, optimistic versions and idempotency. Cyrillic PDFs, CSV and SHA-256 bundles are available. A disposable DB restore and backup-key decrypt drill was verified; full-host recovery remains separate. 5. LICENSING AND DELIVERY EUR2500 excluding VAT for one domain; EUR5000 excluding VAT for unlimited buyer-owned domains, without resale. Optional SpeedCredit.bg with installation: EUR1000 excluding VAT, subject to availability/verified transfer. It is one separately sold asset, not included in every licence. The planned commercial installer will deliver an installation code, separate database, new keys and the buyer’s administrator without demo records/settings. The current demo ZIP is not that production edition. Installer, domain licensing and real-operation mode are still being completed; checkout/code issuance are disabled. Buyer-specific provider contracts/access, final legal documents and acceptance remain required. Support, hosting and migrations are agreed separately.

Plain-text product guide · Licence terms · Contact sales