H.E.L.M: One Workspace to Run Your Entire Operation

Most small operations don't fail for lack of software. They fail because they have too much of it — a spreadsheet for quotations, a separate accounting package, a WhatsApp group for approvals, and a shoebox of PDFs for anything the tax office might ask about. Every handoff between those tools is a place for numbers to drift.

H.E.L.M — short for Hub for Enterprise Lifecycle Management — is our answer to that: one role-aware workspace that runs the whole operation, with tax compliance built into the spine instead of bolted on afterwards. It's the platform that grew out of running JRV's own back office, and it's now the ERP we ship to clients who are tired of stitching five products together.

What it actually does

H.E.L.M is a production ERP with 15+ modules under a single login:

• Accounting — invoices, bills, payment registration, trial balance, balance sheet, and P&L
• Sales — quotations that convert straight into orders, currency pricelists, and SST-aware line maths
• CRM — a New → Qualified → Proposition → Won/Lost pipeline with full opportunity detail
• Purchase — an RFQ flow that confirms directly into a bill
• HR — employees, time off, attendance, and expense approvals
• Documents & Sign — file upload plus a real signer workflow
• Discuss & Calendar — channels and events, so context lives next to the work

Compliance built into the ledger, not bolted on

Tax compliance isn't a feature we added at the end — it's the spine of the ledger. Today that spine runs Malaysian rails end-to-end, and the same ledger-first design extends to whatever jurisdiction you operate in:

• SST-02 reporting comes out of the same ledger that runs day-to-day accounting, so filing is a read, not a rebuild.
• MyInvois UBL submission is scaffolded into the sales and billing flow rather than being a separate export step.
• Line-item tax is calculated the way LHDN expects, so what you file matches what you invoiced — down to the sen.

Security that fits a real team

Everyone from a COMPANY owner down to a READONLY auditor sees exactly what their role allows and nothing more. Sessions are encrypted with iron-session, TOTP 2FA can be enforced per role, and every document that leaves the system is generated server-side as a PDF — no client-side surprises.

The stack

Next.js 15/16 on the App Router, React 19, TypeScript, Prisma over PostgreSQL, Tailwind CSS 4, and Radix UI. Deliberately boring where it should be boring, so the interesting part — the operation itself — stays reliable.

If your team is running the business out of six browser tabs, that's the problem H.E.L.M was built to retire.