How It Works

From workspace setup
to full business operations.

This page explains exactly how YBNW One works — from creating an account to running daily operations across every department in a single connected workspace. Actual mechanics, not marketing abstractions.

One workspace One Postgres database All departments connected Real-time updates

The Core Model

One workspace. One Postgres database. All departments.

The fundamental architecture of YBNW One is straightforward: one workspace is backed by one PostgreSQL database managed by Supabase. Every module — project management, finance, HR, procurement, CRM, compliance, documents — reads from and writes to that same database. There is no sync layer, no middleware, no API bridge between modules. They share the same tables, the same records, and the same foreign key relationships.

A project record created in the project management module and an invoice record created in the finance module can reference each other via a real database foreign key. A vendor record in procurement and a vendor performance record in supply chain are the same vendor. An employee record in HR and a task assignee in project management are the same person referenced by the same primary key in the same employees table. The data is consistent because it is literally the same data.

Step by Step

The path from new account to operational platform.

Most organizations do not need to configure everything at once. The platform is designed to be adopted incrementally. Here is what a typical adoption path looks like, from first login to full operational deployment.

Step 1

Create a workspace and configure it.

When you create an account, the first thing you create is a workspace. A workspace is the top-level container for all your organization's data. It has a name, a logo, a currency setting, a timezone, and a set of global configuration options that shape how all modules behave. These settings cascade through all modules — you define them once and every module respects them.

Workspace currency affects how financial figures are displayed and exported across invoices, budgets, expenses, and reports. Timezone affects how date-based records, leave requests, meeting schedules, and time-sensitive automations calculate and display times. The fiscal year definition affects how budget periods, financial summaries, and performance period comparisons are calculated in the finance and analytics modules.

Most organizations need one workspace. Some run multiple workspaces — a holding company might run one per subsidiary entity, a consulting firm might run one per major client, a franchise might run one per location. Each workspace is a completely separate data environment. Records do not cross workspace boundaries. Row-level security at the database layer enforces this structurally, not through configuration.

Workspace name Currency Timezone Fiscal year Logo & branding
Config

Workspace settings

Name, logo, currency (GBP default, configurable), timezone, fiscal year start, default approval chains, notification preferences, branding colors for customer-facing outputs.

DB

What this creates in the database

A record in the workspaces table with a unique workspace ID. Row-level security policies on every subsequent table reference this workspace ID. All data created in this workspace is permanently scoped to this single identifier.

Plan

Billing plan selection

Choose Free (evaluation), Team Cloud ($49/month), Business Cloud ($149/month), Scale Cloud ($399/month), or Enterprise. Plans determine capacity limits, not which modules are available.

Roles

12 predefined roles

Administrator, Manager, Team Lead, Employee, Contractor, Viewer, Finance Manager, HR Manager, Compliance Officer, Project Manager, Support Agent, Custom. Each has a curated default permission set for that role type.

Perms

795 named permission constants

Every significant operation has a named permission: VIEW_ALL_INVOICES, MANAGE_PAYROLL, CREATE_PROJECT, APPROVE_PURCHASE_ORDER, DELETE_VENDOR, VIEW_AUDIT_LOG, MANAGE_INVENTORY. Permissions are discrete, auditable, and assignable per role.

Guard

Dual enforcement

Permissions enforced by ProtectedRoute in React (UI layer) AND by Supabase RLS policies (database layer). Neither layer trusts the other as the only security boundary.

Step 2

Invite your team and configure roles and permissions.

Once the workspace is configured, you invite team members. An invitation sends a sign-up email. There is no per-seat charge — every team member you invite is included in the workspace subscription. What scales with your plan is workspace capacity (storage, compute, AI calls, automation runs) — not the number of people in the workspace.

Each user is assigned one or more roles. The Administrator role has access to all 795 permissions. The Viewer role has read-only access across all modules. The Finance Manager role has permissions for invoice management, budget management, expense management, and financial reporting, but does not have access to HR payroll records, vendor management, or project deletion. Roles can be customized by adding or removing individual permissions.

Permissions are checked at both the UI layer (the ProtectedRoute component prevents rendering of unauthorized views, and hasPermission() prevents rendering of unauthorized controls) and the database layer (Supabase row-level security policies reject unauthorized queries regardless of what the frontend sends). The database does not trust the frontend to have applied permissions correctly.

Step 3

Configure the structural data that all modules share.

Before modules produce useful data, the workspace needs structural configuration. This is work for an administrator or implementation specialist, and it shapes how all subsequent data looks and connects. Getting this right early prevents data cleanup later.

Departments and teams are the organizational units that records are assigned to. An invoice is assigned to the Finance department. A project is assigned to the Engineering team. An employee belongs to the HR department. Departments are used for filtering, for budget allocation, for access scoping, and for reporting aggregation. If the department structure is poorly defined, cost center reporting and team-level dashboards will be unreliable.

Chart of accounts is the financial configuration that defines how income and expenses are categorized across the invoice manager, the budget planner, the expense tracker, and the profit-and-loss statement. YBNW One ships with 10 built-in expense categories (Software, Hardware, Travel, Meals, Office, Marketing, Professional Services, Utilities, Training, Other) and supports custom categories for organizations with more specific needs.

Custom fields can be added to any entity type — projects, contacts, employees, vendors, invoices, risks. Custom fields support text, number, date, dropdown, multi-select, and boolean types. They appear in all views for that entity, in filters, in reports, and in CSV exports. Defining custom fields before data entry ensures that the fields are populated consistently and searchable from day one.

Org

Organizational structure

Departments, teams, cost centers, locations, and business units. These are the structural backbone that all records reference for filtering, budgeting, scoping, and reporting.

Finance

Financial configuration

Chart of accounts, expense categories (10 built-in + custom), tax rates, currency, payment methods, approval chains for budgets and purchase orders, payment terms defaults.

Custom

Custom fields and tags

Add custom attributes to any entity. Supported types: text, number, date, dropdown, multi-select, boolean. Global tag taxonomy shared across all modules for consistent cross-module filtering.

Start

Common first modules

Projects + Finance for delivery businesses. Finance + Procurement for operational businesses. HR + Projects for resource-intensive teams. CRM + Projects for client-facing organizations.

Link

Create cross-module connections

Link projects to budgets, projects to invoices, projects to team assignments, vendors to purchase orders, customers to projects, employees to leave requests, risks to compliance requirements.

Expand

Natural expansion path

Projects expands to Sprints, Milestones, Risk, Kanban, EVM, Resource Planning. Finance expands to Procurement, AP/AR, Cash Flow, Tax. HR expands to Recruitment, Skills, Leave, Performance.

Step 4

Enable modules and start building operational data.

Most organizations do not need to configure all 160+ modules simultaneously. A common starting pattern is to begin with the modules that replace the most painful points in the current stack, stabilize those workflows, and then expand to adjacent modules. The shared data layer means that when you do expand, new modules automatically see the existing records.

Starting with project management gives the delivery team a Kanban board with configurable columns (To Do, In Progress, Review, Done — fully customizable with additional columns), full drag-and-drop task management, sprint planning with capacity tracking, milestone management with date-based gates, Gantt-style portfolio timeline, Work Breakdown Structure editing, risk register, and Earned Value Management curves. All task assignees pull from the same employee records that HR uses.

Starting with finance gives the finance team an invoice manager that handles the full lifecycle from draft to paid (with line items, configurable tax rates, payment terms, payment method tracking, and multi-currency support), a budget planner with department and project budget types (and real-time planned vs actual variance), an expense tracker with category assignment and billable flagging, and a profit-and-loss statement that aggregates revenue and expenses by any period.

Starting with HR gives the people team employee records with full profile management, leave management covering 8 leave types (Annual, Sick, Personal, Maternity, Paternity, Bereavement, Unpaid, Remote Work) with automatic day calculation and approval workflow, a recruitment ATS with 8-stage candidate pipeline (Applied, Screening, Interview 1, Interview 2, Assessment, Offer, Hired, Rejected), payroll management with UK tax code support, and attendance tracking.

Step 5

Build dashboards and reports from live operational data.

Once operational data is being created, the reporting layer becomes valuable. The main workspace dashboard is divided into 10 sections — Finance, Portfolio, Management, People, Governance, Operations, Content, Analytics, Communication, Productivity — each of which loads category-specific widgets automatically based on what is in the workspace.

The KPI dashboard allows you to define performance indicators with a name, category (Revenue, Engineering, Operations, People, Quality, or Customer), current value, target, unit (%, $, count, hours, points, days, or multiplier), and trend direction (up-good, up-bad, down-good, neutral). The system calculates status automatically: On Target is current ≥ 95% of target, Near Target is 75–95%, Off Target is below 75%. Each KPI shows a sparkline with 8 historical data points.

The executive dashboard gives leadership a snapshot with four financial KPIs with red-amber-green status, monthly performance charts, attrition trends, NPS trends, headcount views, and operational alerts — all from the operational data the team creates daily. The executive summary feature generates structured period reports with headline, overall status, KPI grid, project status, key highlights, risks, decisions, and next-period focus — printable directly from the browser.

The report builder allows ad-hoc reports from any entity in the database — projects, invoices, employees, vendors, contacts, risks, compliance requirements — with configurable filters, grouping, sorting, and calculated fields. Reports can be scheduled for automated delivery and exported to CSV.

Live

Real-time dashboard updates

Dashboard widgets subscribe to Supabase Realtime. When a project status changes or an invoice is marked paid, the relevant cards update without a page refresh. Live data without polling.

KPIs

KPI tracker

Define any metric. Auto-calculated On Target / Near Target / Off Target status. 8-point sparkline history. 6 category types. Status shown as colored badge on each KPI card.

Exec

Executive summaries

Structured period summaries: headline, overall status (green/amber/red), KPI grid (6 columns: value, unit, delta), project status, key highlights, key risks, key decisions, next period focus. Printable from browser.

Rules

Automation engine

Trigger: record change, status change, date condition, threshold breach. Action: create record, update field, send notification, escalate, call webhook, assign task.

Hooks

Webhook integrations

Outbound webhooks on any event. Inbound webhooks from external systems. Configurable headers, payload templates, retry logic. Full log of request/response history per webhook.

AI

AI over structured data

Natural language questions answered from workspace data. Because all data is in one structured database, AI answers are grounded in actual operational records, not in documents the AI has to interpret without context.

API

API access

API keys for programmatic access. Same permission model applied to API calls as to user sessions. Rate limiting and usage monitoring per key. Key rotation without downtime.

Step 6

Add automation, integrations, and intelligence.

Once core workflows are running on real operational data, the automation and AI layers add compounding value. These are not separate products that need to be connected — they run on top of the same shared data layer.

Automation rules allow trigger-action workflows without writing code. An automation can trigger when a project status changes to "at risk" and automatically create a task for the project manager, send a notification to the team lead, and flag the project in the risk register. An automation can trigger when an invoice becomes overdue and send a reminder to the billing contact, update the invoice status, and escalate to the finance manager if the amount exceeds a defined threshold.

Webhook integrations allow YBNW One to push events to external systems. When a purchase order is approved, a webhook notifies an external ERP. When a customer health score drops, a webhook creates a Slack notification. Incoming webhooks from external systems can trigger automation rules. The webhook system supports custom headers, payload templating, and retry logic with a full request/response log for debugging.

AI assistance operates over the workspace's structured data. Because all the data is in one database, the AI context is richer than what a general-purpose assistant can access from a chat interface. The AI can answer questions about delivery status, budget variance, vendor performance, team workload, and compliance status because those answers exist as structured records in the workspace — not as free-text documents requiring interpretation.

Data Flow

How records move through the platform.

The following shows the most common data flows across YBNW One modules. Each flow represents records in the same database referencing each other via foreign keys — not data being pushed between systems through APIs or manual exports.

CRM
Sales
Deal closes in CRM pipeline

A deal moves to Closed Won (6 pipeline stages: Prospecting, Qualification, Proposal, Negotiation, Closed Won, Closed Lost). The deal value, client name (from crm_companies), contact (from crm_contacts), and delivery commitments seed a new project record. The client enters the customer success module. Nothing is re-entered manually.

Creates

Project record. Customer success account. Budget allocation from deal value.

Projects
Delivery
Project is created and staffed

Team members assigned from employees. Milestones set with target dates. Kanban board created with customizable columns. Sprint planning organizes work into capacity-bounded iterations. Time logs connect to payroll costing. Purchase orders for project vendors flow to procurement. Risk register entries connect to the risk heatmap.

Connects to

HR employee records, time tracking, procurement POs, finance budgets, risk register, document cabinet, customer success.

Finance
Accounting
Invoices, expenses, and budgets converge

Client invoices created with project reference, line items, tax rate, payment terms, currency. Expenses logged by category with project allocation. Budget planner shows planned vs actual variance in real time. P&L aggregates by period. Cash flow forecast projects inflows and outflows from invoice due dates.

Connects to

Projects, procurement AP, CRM accounts, HR payroll costing, executive dashboard KPIs.

HR
People
Employee records underpin all operations

Every team assignment, task assignee, approval chain participant, time log entry, and payroll run references employees. Leave requests affect resource availability. Skill matrix data informs staffing. Performance reviews link to development goals. Workload heatmap shows allocation across all active projects.

Connects to

Projects, resource planning, payroll, compliance, org chart, succession, leave calendar.

Reporting
Intelligence
Dashboards read from live operational tables

Executive dashboard, KPI tracker, analytics module, and report builder all query the same Postgres database that operational modules write to. No ETL pipeline. No data warehouse. No overnight batch job. Dashboard data is live, consistent, and scoped to the permissions of the viewer — a contractor sees only their assigned projects, a finance manager sees all financial records but not HR records.

Sources

All tables. Real-time via Supabase subscriptions. Permission-scoped per viewer role.

Common Questions

How it works in practice.

Does everything need to be configured before we can start?

No. The platform is designed for incremental adoption. Start with just projects or just finance, get value from those modules, and expand as your team becomes comfortable. When you add a new module, it automatically sees the existing records from other modules — projects already exist for invoices to reference, employees already exist for HR workflows to reference. You do not need to re-enter data when you expand.

What happens to existing tools and data?

The import manager supports bulk CSV import for most entity types. For complex migrations from existing accounting systems, CRM databases, or HR records, the implementation team can design a migration path that maps your existing data structure to the YBNW One schema. The platform is designed to coexist with existing tools during a transition period — there is no requirement to cut over all at once.

How do contractors or external users see only what they should?

The Contractor role type has a scoped permission set that limits visibility to assigned projects only. This scoping is enforced at the database layer — a contractor's Supabase session generates SQL queries that are filtered by the workspace's RLS policies. Even if a contractor manipulated the frontend JavaScript, the database would return only the records their policies permit.

Can we customize the platform without writing code?

Significantly. Custom fields can be added to any entity. Custom views are built via the report builder. Automation rules are configured in a no-code trigger-action editor. Custom tags, categories, and approval chains are defined in settings. For deeper customization — new module types, schema changes, custom integrations — the implementation services team can scope and build those changes.

How does the AI layer access workspace data?

The AI assistant operates over structured workspace data via controlled database queries. It does not have open-ended access to all workspace data — each AI query is scoped by the requesting user's permissions. An AI query submitted by a viewer produces results from the subset of data that the viewer can see. A finance manager's AI query can see financial records but not HR payroll data. The permission model applies to AI queries the same way it applies to regular user sessions.

How is the database backed up?

Supabase provides point-in-time recovery for the PostgreSQL database. The backup module in workspace admin settings provides additional configuration including scheduled export snapshots of key entity data. Enterprise plans include custom backup schedules, cross-region backup storage, and restore testing. All backups are encrypted at rest using AES-256. Restore procedures are documented and tested as part of the enterprise onboarding process.

Ready to see it working for your team?

Start a free workspace and explore every module. No feature gates, no seat limits, no time pressure. Or book a walkthrough and we will show you the platform against your specific stack and use case.