01
Daily command center
Executive KPI cockpit
Active contracts, overdue receipts, cash collection, and expiring policy signals stay visible in one fast scanning layer.
4 live KPIs
AGENCY
INSURANCE
SOFTWARE
Contract Management|Payment Tracking|Encrypted Backups
Encrypted Insurance Software.
AssurPro replaces unencrypted early-2000s Access and Firebird software with one encrypted desktop platform for contracts, receipts, payments, and production reporting at Moroccan insurance agencies.
Insurance operations platform2025Design, architecture, buildShipped
Product features
02
Policy lifecycle
Contract register
The register tracks every contract across six product types and four payment frequencies, flagging renewals before they lapse.
6 product types
03
Customer movement
Receipt activity feed
Every quittance is auto-generated and split by payment frequency, with paid and pending receipts tracked in one feed.
04
Cash visibility
Payment split
Every payment is recorded as cash, cheque, or bank transfer and rolled into a daily caisse total in Moroccan dirhams.
3 payment methods
05
Agency performance
Production reporting
Collected, outstanding, and pending totals render as charts, with CSV export for anything that needs to leave the app.
3 report lanes
06
Data integrity
Soft delete only
Every record is soft-deleted and every change is written to an audit log with the user, timestamp, and a before/after diff.
Engineering stack
What Powers AssurPro.
01
Module 01
Desktop shell & runtime
Electron 33+contextBridge IPCNo Node integrationSandboxed renderer
02
Module 02
Frontend & interface
React 18TypeScript 5.4Shadcn/uiTailwind CSSZustand
03
Module 03
Forms & data integrity
React Hook FormZod validationTanStack Table
04
Module 04
Data & security
SQLite + better-sqlite3SQLCipher AES-256Drizzle ORMbcrypt hashing
05
Module 05
Documents & reporting
@react-pdf/rendererRechartsi18next (FR/AR)
06
Module 06
Quality & build
VitestReact Testing LibraryESLint + Prettierelectron-builder
01
Module 01
Desktop shell & runtime
The renderer gets zero Node.js access; every capability crosses a typed IPC channel, so a compromised UI can't touch the database.
Electron 33+contextBridge IPCNo Node integrationSandboxed renderer
02
Module 02
Frontend & interface
TypeScript strict mode catches data-shape mistakes at compile time, before they reach a database holding real client records.
React 18TypeScript 5.4Shadcn/uiTailwind CSSZustand
03
Module 03
Forms & data integrity
Every form is schema-validated twice, once for UX, again in the main process before it reaches the database.
React Hook FormZod validationTanStack Table
04
Module 04
Data & security
The database is encrypted with SQLCipher and the key lives in the OS keychain, so a stolen laptop yields nothing readable.
SQLite + better-sqlite3SQLCipher AES-256Drizzle ORMbcrypt hashing
05
Module 05
Documents & reporting
Attestations and quittances render as PDFs in French or Arabic, right-to-left, with fonts embedded so layout never depends on the machine.
@react-pdf/rendererRechartsi18next (FR/AR)
06
Module 06
Quality & build
A tested, linted pipeline packages every build into an NSIS Windows installer, ready for agency rollout.
VitestReact Testing LibraryESLint + Prettierelectron-builder
Why it exists
GestAssur 2004 (clients.mdb)
Stuck in 2004.
GestAssur 2004 (clients.mdb)
_□✕
Unencrypted Access and Firebird files anyone can copy off the machine
Locked to a single PC. The office stops if it dies
No audit trail, no backups, no user roles
Vendors long gone, no updates since the 2010s
Last backup: never · 1 user connected
The answer
Switch without losing a client.
CSV export
Separator detected
Columns mapped
Rows validated
Import summary
Clients Contracts Quittances Payments
System design
Nothing crosses without a contract.
Renderer React 18
No Node. No filesystem. No database. The interface can only ask.
contextBridge typed IPC
Every channel enumerated as domain:action. Nothing dynamic, nothing implicit.
Main process services
Business logic, authorization, and audit live here. Nothing else may write.
Repositories interfaces
SQLite sits behind an interface, so the storage engine can change without touching a service.
API implementation (V2)
Same interface, different storage engine. Nothing above this line would need to change.
contextIsolation: truenodeIntegration: falseZod on both sidesSoft deletes onlyMoney as centimesIPCResult<T> on every call
Security architecture
Built like a vault.
Renderer
Zero Node.js, zero filesystem, zero database access. The interface can only ask.
Bridge
Every IPC channel enumerated and typed. No dynamic channels, no leaks.
Services
Zod re-validates every input; RBAC checks every call; audit logs every write.
Vault
AES-256 encrypted at rest, key held in the OS keychain. Soft deletes only.
AES-256 at restbcrypt cost 123-role RBACFull audit logAuto-lock 15 minZod double validation
Office network
One office. One database. Zero internet.
Full local copy on every PC
Each PC holds the complete encrypted database and keeps working fully offline if the server is unreachable.
Push, then pull, every 5 minutes
Each client pushes its local changes to the server, then pulls what's new and upserts it.
Last write wins
When two PCs edit the same record, the one with the newer updated_at timestamp wins.
Shared token, LAN only
Every request carries a shared token in the x-sync-token header. Wrong token, no data.
PC Principal
Serveur, port 4567
PC Secondaire 1
Sync, 5 min
PC Secondaire 2
Sync, 5 min
PC Secondaire 3
Sync, 5 min
Token protected LAN only, no cloud
Documents & compliance
One document, fully local.
Three legal documents, generated locally
Attestation d'assurance, quittance de prime, avis d'échéance. Rendered in the main process, never in the browser.
French and Arabic, with real RTL
Direction flips on the document root, not just text alignment. Fonts embedded so output is identical on any machine.
Templates live in the database
Agencies edit their own document layouts from Settings, with live preview. No redeploy to change a letterhead.
FR
Attestation d'assurance
Agrément ACAPS N° 000
ClientDossier n° 00214
Police N°AP-2025-0148
Prime annuelle2 400 MAD
Date d'effet01/03/2025
Signature et cachet de l'agence
AttestationQuittanceAvis d'échéance
Trade-offs
Every choice cost something.
Cost 01
A ~2.7 MB renderer bundle and a per-machine install. Acceptable: these offices have unreliable internet and the data must never leave the building.
Cost 02
No central analytics, no remote support access. In exchange, an agency's client records physically cannot leak to a server I control.
Cost 03
Concurrent edits to the same record lose data. With 3–6 staff on one office network editing different clients, the collision rate does not justify the complexity.
Cost 04
No recurring revenue. But agencies replacing software they bought once in 2004 do not trust a monthly bill, and the sale closes.
Cost 05
A SmartScreen warning on first run, handled during install. The certificate cost was not justifiable before the first sale.
Scope
What I left out.
I kept V1 narrow because these agencies needed a working replacement, not a feature list.
Claims managementCloud syncWhatsApp integrationMobile companionMulti-branchAI featuresSMS & email notificationsMulti-currency
Each of these was a deliberate cut with a reason, not a gap.