Tesca Visa Workflow CRM
An enterprise multi-role visa workflow and case management CRM featuring master university catalogs, stage-driven applicant pipelines, and automated communications.
Courses cataloged
Partner universities
Faster case handling
Problem & Context
Tesca Visa Consultancy handles hundreds of international immigration and study-abroad applications simultaneously across 12+ countries. To eliminate spreadsheet bottlenecks, missed follow-ups, and fragmented team coordination, this custom enterprise CRM was engineered to orchestrate the entire student lifecycle—from initial lead intake and counseling to university shortlisting and embassy visa filing.
Coordinating multiple operational tiers (Receptionists, Senior Counselors, Head Counselors, and Visa Filing Officers) required strict Role-Based Access Control (RBAC), multi-stage state machines, real-time auditory lead notifications, and zero data leakage across sensitive student dossiers.
Engineering Strategy
Engineered a full-stack Next.js and PostgreSQL (Neon/Supabase) enterprise portal. Implemented a 1,000+ course & 227 partner university master catalog with Excel imports, a 5-tier RBAC system, webhook inquiry ingestion from the marketing site, automated stage-change emails via Nodemailer, and hardened session security.
Built with Next.js App Router, React 19, and Tailwind CSS. The data layer utilizes Neon serverless PostgreSQL with Supabase SSR for authenticated sessions and Row-Level Security (RLS). TanStack Query manages optimistic server-state synchronization. Automated email triggers are dispatched via server-side Nodemailer pipelines.
Architectural & Technical Choices
Designed a unified Case State Machine (Inquiry → Counseling → Admission → Visa Filing → Outcome) preventing invalid status leaps.
Built a high-capacity University & Course Master Catalog supporting 1,000+ degree programs with faceted country/IELTS filtering and bulk Excel ingestion.
Implemented real-time audio chime alerts and storage listeners for instant counselor reaction to new submissions.
Executed a comprehensive security audit removing hardcoded secrets, parameterizing queries, adding timing-safe OTP verification, and enforcing rate limiting.
Engineering Challenges Overcome
⚠️ Challenge: Managing massive university course catalogs with frequent updates without UI sluggishness.
✓ Solution: Implemented client-side TanStack Query pagination, indexed PostgreSQL searches, and asynchronous bulk Excel parsing with xlsx.
⚠️ Challenge: Preventing unauthorized data modification and privilege escalation among diverse staff roles.
✓ Solution: Enforced server-authoritative RBAC middleware validating session tokens and verifying permissions at every API route and database query.
