Memnon Development

JOB TITLE: Full-Stack Developer Needed for Investment Platform Backend: Netlify, Supabase, Google Drive, Monday.com, Login, Roles, Forms & Reports PROJECT OVERVIEW: We have a nearly finished corporate/investment website for Memnon Capital Africa. The public website design is already approved and should NOT be redesigned. We now need a strong full-stack developer to build and connect the backend, login system, secure form workflows, Google Drive document storage, Monday.com automation, email notifications, reports, backups and admin access. This is not a basic contact-form job. The website is becoming a real operating platform with several connected workflows: 1. Public website 2. Contact form and enquiry management 3. SML Qualification System for mining licence holders 4. Investor Data Room request workflow 5. Internal Ore-to-Doré / Management System connection 6. Google Drive structured document storage 7. Monday.com workflow automation 8. Login with different roles and permissions 9. Reports, audit logs and backups The frontend design should remain largely unchanged. The task is backend, integrations, security, workflow and deployment. PREFERRED TECH STACK: We are open to recommendations, but the preferred stack is: - Netlify for website hosting and serverless functions - Supabase for database, authentication, user roles, permissions and audit logs - Google Workspace / Google Drive API for document storage - Monday.com API for workflow boards and task automation - Email service for confirmations and internal notifications - GoDaddy only for domain/DNS, not for rebuilding the website AUTHENTICATION REQUIREMENTS: We need a secure login system with: - Email + password login - Email verification - Google/Gmail login - Apple login - Password reset - Role-based access control - Admin approval where required - Secure session handling User roles should include: 1. Super Admin Full access to system settings, users, permissions, data, reports and integrations. 2. Memnon Admin Can review SML applications, investor requests, contact submissions, reports and workflow status. 3. Reviewer / Analyst Can review assigned SML or investor files but cannot change system settings. 4. SML Applicant Can submit licence information, upload documents, track status and see only their own application. 5. Investor Can request access, complete NDA/KYC flow and access only approved investor data-room documents. 6. Operations User Can access restricted management-system modules if approved. IMPORTANT SECURITY RULE: SML applicant documents must never automatically be shared with investors. SML Qualification and Investor Data Room must be separate confidential workflows. BACKEND WORKFLOW REQUIREMENTS: 1. CONTACT FORM The Contact Us page should not open an email app. It must submit properly. Flow: - User submits contact form - Backend validates the form - Record is saved to database - Monday.com item is created - Internal Memnon team receives email notification - User receives automatic confirmation email - User sees success message with reference number Example: “Thank you. Your enquiry has been received. Reference: MEM-CON-2026-00041.” 2. SML QUALIFICATION WORKFLOW For mining licence holders. Flow: - Applicant creates account or submits application - Email verification - Applicant fills SML qualification form - Uploads licence documents, photos, company documents and supporting files - Backend creates database record - Google Drive folder is created automatically in the correct folder structure - Uploaded files are stored in Google Drive - Monday.com item is created in SML Qualification Pipeline - Internal team receives notification - Applicant receives confirmation and reference number - Status can be updated internally - Applicant can only see their own application Suggested statuses: - New Submission - Document Check - Licence Verification - Site Review - Assay Required - Commercial Review - Approved for DD - Rejected / Archived 3. INVESTOR DATA ROOM REQUEST WORKFLOW For qualified investors. Flow: - Investor submits access request - Creates account or verifies email - NDA/KYC questions collected - Backend creates database record - Monday.com item is created - Internal team approves/rejects - If approved, investor receives access instructions - Google Drive access is granted only to approved folders/files - Access is logged Important: Investor Data Room must be separate from SML Qualification uploads. 4. GOOGLE DRIVE STORAGE STRUCTURE We need structured Google Drive storage using Google Workspace/Shared Drives. Recommended folder structure: Memnon Capital Africa - Operations/ 01_Public_Website_Assets/ 02_SML_Qualification_Submissions/ 00_New_Submissions/ 01_Under_Review/ 02_Licence_Verification/ 03_Assay_Metallurgy/ 04_Commercial_Review/ 05_Approved_For_DD/ 06_Rejected_Archived/ 03_Investor_Data_Room/ 00_Public_Overview/ 01_NDA_Required/ 02_Approved_Investors/ 03_Project_Materials/ 04_Governance_Compliance/ 05_Financial_Model/ 06_Archived_Access/ 04_Management_System_Exports/ Daily_Production/ Feedstock_Intake/ Assay_Reports/ Dore_Reconciliation/ Security_Chain_of_Custody/ Board_Reports/ 05_Legal_Compliance/ 06_Partners/ 07_Community_Spotlight/ 08_Backups_Exports/ Every application/request should have: - unique reference ID - database record - Google Drive folder ID - Monday.com item ID - status history - audit log 5. MONDAY.COM INTEGRATION We need Monday.com connected via API. Create or connect boards for: Board 1: SML Qualification Pipeline Columns: - Application ID - Licence Holder - SML Number - District - Contact Person - Email - Phone - Status - Reviewer - Documents Received - Google Drive Folder Link - Risk Level - Next Action - Submission Date - Last Updated Board 2: Investor Data Room Requests Columns: - Request ID - Investor Name - Company - Email - Investor Type - NDA Status - KYC Status - Approval Status - Drive Access Status - Assigned Owner - Follow-up Date - Notes Board 3: Contact / Partner Enquiries Columns: - Enquiry ID - Name - Company - Email - Subject - Category - Priority - Assigned Owner - Status - Reply Sent - Next Step Board 4: Community / Spotlight Program Columns: - Project - Location - Community - Partner - Budget - Status - Impact Metrics - Photos/Documents - Reporting Period 6. REPORTS We need basic reporting/export features. Reports should include: - Daily contact enquiries report - Weekly SML qualification pipeline report - Weekly investor request report - Monthly board/investor activity report - Monthly community/Spotlight impact report - Management-system export report where relevant Reports should be exportable as: - PDF - Excel/CSV - stored automatically in Google Drive - optionally emailed to admins 7. BACKUPS We need a clear backup strategy. Required: - Supabase/database backup - Google Drive folder structure backup/export - Monthly full export of critical records - Audit log retained - No API keys exposed in frontend - Environment variables used for secrets - Documentation on how to restore data 8. ADMIN DASHBOARD At minimum, we need a simple admin area where approved Memnon users can: - View contact submissions - View SML applications - View investor requests - View status and history - Open related Google Drive folder - Open related Monday.com item - Update status - Assign reviewer - Export report - See audit log This can be a lightweight internal dashboard, not a complex system at first. 9. DEPLOYMENT AND DOMAIN The domain is managed through GoDaddy. We want the developer to guide and implement: - Deploy final website to Netlify - Connect GoDaddy DNS to Netlify - Ensure SSL works - Confirm www and non-www versions work - Do not cancel domain - Do not rebuild in GoDaddy Website Builder - Preserve email DNS records - Test all pages after domain transfer 10. SECURITY REQUIREMENTS The developer must follow security best practices: - No exposed API keys - Use environment variables - Validate all form submissions - Secure file uploads - Restrict file types and file sizes - Role-based access control - Row-level security if using Supabase - Audit logs for access and changes - Email verification - Password reset - Admin approval for sensitive access - Separate SML and Investor workflows - Google Drive permission control - NDA/KYC gate for investor data room DELIVERABLES: Please quote the project in phases. Phase 1: Deployment + Contact Form Backend - Deploy website to Netlify - Connect GoDaddy domain/DNS - Contact form submission - Database save - Email confirmation - Monday.com contact item - Basic admin view Phase 2: SML Qualification Workflow - SML form backend - File upload - Google Drive folder creation - Monday.com pipeline item - Applicant confirmation - Internal notification - Status tracking Phase 3: Investor Data Room Workflow - Investor request form - NDA/KYC fields - Approval workflow - Google Drive permission control - Monday.com investor board - Email notifications Phase 4: Login + Role-Based Access - Email/password login - Email verification - Google/Gmail login - Apple login - Password reset - Roles and permissions - Admin dashboard Phase 5: Reports, Backups and QA - PDF/CSV reports - Weekly/monthly reports - Backup system - Audit logs - Full link/form/security QA - Documentation REQUIRED EXPERIENCE: Please only apply if you have experience with most of the following: - Full-stack web development - Netlify or serverless functions - Supabase or PostgreSQL - Authentication and role-based permissions - Google Drive API / Google Workspace API - Monday.com API - Secure file uploads - Email notifications - Admin dashboards - DNS/domain setup with GoDaddy or similar registrar - Security best practices - API integrations WHAT WE WILL PROVIDE: - Final website files - Brand/design direction - GoDaddy access or screen-share support - Google Workspace access or admin-created credentials - Monday.com workspace access - Required form fields - Company email addresses - Workflow approval rules WHAT WE EXPECT FROM YOU: In your proposal, please include: 1. Your recommended architecture. 2. Whether you agree with Netlify + Supabase + Google Drive + Monday.com, or if you recommend another setup. 3. Examples of similar projects. 4. Confirmation that you can implement Google/Gmail login, Apple login and email/password login. 5. Confirmation that you can implement Google Drive API folder/file automation. 6. Confirmation that you can implement Monday.com API automation. 7. Your phased price estimate. 8. Your estimated timeline per phase. 9. What access you will need. 10. How you will protect API keys and sensitive data. 11. How you will separate SML applicant data from Investor Data Room data. 12. How you will handle backups and reporting. IMPORTANT: Please do not propose rebuilding the whole website from scratch unless absolutely necessary. The design is mostly finished. This is a backend, integration, login, workflow and deployment project.