Product · CustomerPortal

Self-service.
Zero calls.

CustomerPortal gives your customers round-the-clock access to their own orders — mirrored from your FileMaker ERP, refreshed every five minutes. Your ERP stays closed: read-only, and internal calculation data never leaves the building in the first place.

Every customer sees their own data only — enforced on two levels.

24/7 self-service for your customers —
no call to your dispatchers
11 interface languages —
switchable per user
2 levels of data isolation: app filter plus
row-level security — fail-closed
13 adversarial security tests
prove the customer separation

The problem

“Where is my shipment?”
Every day. By phone.

Your dispatchers answer the same questions every day: Where is the order? When is loading? Has it been delivered? The answers have long been in the ERP — but nobody from outside is allowed into the ERP.

CustomerPortal resolves the dilemma: self-service for customers, without opening the ERP.

  • Customers see orders, dates, loading and unloading stops and the status history
  • Read-only: no write path into the ERP, no risk for your data
  • Internal fields such as margins and costs are never synchronised in the first place
  • FileMaker stays the leading system — the portal reads its own mirror database

Features

From the dashboard to the status history.

A tidy cockpit for your customers — and an administration that largely runs itself for you.

01

An order cockpit for customers

A dashboard with KPI tiles per status, below it the order list with filters, full-text search and sortable columns — on desktop and on the phone.

  • Status filters and search by order, reference or place
  • Order detail with stops, dates, licence plates and cargo
  • Status history as a timeline — from planning to delivery
02 Fail-closed

Data isolation on two levels

Every customer sees exclusively their own data — enforced in the application code and additionally in the database itself. Without a customer context set, the database returns: zero rows.

  • App filter plus row-level security in PostgreSQL
  • Fail-closed: in doubt, no data rather than someone else’s data
  • 13 adversarial tests prove the separation
03

Administration that runs itself

You link the customer number once — after that, customer admins manage their own company’s users themselves. Access is by invitation only.

  • Invitation links instead of self-registration — you stay in control
  • Customer admins manage their own users
  • Mandatory two-factor for admins, trusted devices, audit log
04

FileMaker sync with a cockpit

A sync worker mirrors the approved order data every five minutes, with a full reconciliation at night — monitored in its own sync cockpit.

  • Incremental every 5 minutes, full reconciliation nightly
  • Monitor with runs, statistics, quarantine and outage warning
  • Field whitelist: only approved fields ever leave FileMaker

In preparation: invoices & credit notes plus a documents area — the portal structure is already in place for both.

Security & privacy

An extranet that gives nothing away.

A customer portal is a door to the outside — it has to be secured better than any internal application. That is why CustomerPortal is built on data minimisation and hardening.

Data minimisation by design

Margins, costs and calculation fields are never read from FileMaker in the first place — what never reaches the portal database cannot leak.

Hosted in Austria

Operated in a Vienna data centre with a data-processing agreement; backups encrypted, including offsite.

No tracking, no banner

Only technically necessary cookies, fonts served locally, no third parties — which is why it does not even need a cookie banner.

Hardened and audited

Mandatory two-factor for admins, encrypted secrets, hardened containers — current security scan: zero critical, zero high findings in the API image.

Read-only towards the outside: the portal cannot write into the ERP — not even by accident.

Included in the portal

One portal, thought through.

From login to sync monitor: these building blocks are included as standard.

Dashboard

KPI tiles per status, clickable filters

Order detail

stops, dates, cargo, status history

11 languages

German, English and nine more

Mobile-friendly

responsive interface including dark mode

Invitation flow

links instead of self-registration, valid 7 days

Roles & 2FA

operator admins, customer admins, users

Sync cockpit

runs, statistics and controls at a glance

White label

your brand, your colours, your domain

Every company gets its own environment: its own database, its own domain, its own design — physically separated instead of a shared cloud.

Technology

A modern stack, consistently hardened.

CustomerPortal is a lean web application (React, TypeScript, PostgreSQL) that reads its own mirror database — filled by a sync worker via the FileMaker OData interface, every five minutes.

It runs in hardened containers behind a TLS edge, with automatic certificates and encrypted backups. CustomerPortal is developed AI-assisted throughout — the product itself deliberately ships without AI and without tracking.

  • React + TypeScript, PostgreSQL with row-level security
  • Sync worker via FileMaker OData, field whitelist included
  • Argon2id passwords, TOTP two-factor, server-side sessions
  • Docker deployment with TLS, HSTS and offsite backups
  • Over 200 automated tests, including 13 adversarial isolation tests

Frequently asked questions

Can customers change anything in our ERP through the portal?

No. The portal is strictly read-only: it reads its own mirror database filled by the sync — there is no write path into FileMaker, not even by accident.

Does a customer really only see their own data?

Yes — doubly enforced: the customer filter is enforced in the application code and additionally in the database itself (row-level security). Without a customer context set, the database returns zero rows. 13 adversarial tests prove exactly that.

What about our margins and purchase prices?

They never leave FileMaker in the first place: the sync works with a field whitelist and reads only approved order fields. What never reaches the portal database can never be displayed.

How current is the data — is there live tracking?

The sync runs every five minutes, with a full reconciliation at night. The status history shows the milestones from your ERP — GPS vehicle tracking is deliberately not part of the portal.

What do we need for it?

A FileMaker with OData access (reachable via VPN, for example) and a small server or VM. We handle installation, connection, branding and inviting your first customers as a project.

Is there AI inside CustomerPortal?

No — quite deliberately: no AI, no tracking, no third parties. A customer portal should protect data, not mine it. The portal itself, however, is developed AI-assisted throughout.

Status & contact

Built for two brands — ready for yours.

CustomerPortal has been built for two Viennese transport companies — the same software, two corporate designs, physically separated environments. If your customers also call every day to ask about orders: tell us about your process.

CustomerPortal is a software product by Pabeschitz Computer Consulting GmbH. Operated as a dedicated instance per company; feature scope depends on the expansion stage — the invoice and documents areas are in preparation.