SecurityCAN I VIBECODE
Qooling?
BUILD FIRST
- A non-sensitive or read-only version of the core experience
- A manual review step wherever correctness or trust matters
- A narrow companion tool that removes a real piece of work
LEAVE FOR LATER
- Regulated decisions, payments, or irreversible actions
- Claims of correctness, compliance, or uptime that the MVP cannot support
- Sensitive integrations until security, support, and auditability are ready
RESEARCH NOTES
What this tool actually does.
Qooling is a cloud-based QHSE (Quality, Health, Safety, Environment) management platform that unifies quality, safety, and security tools on one system. Core modules include Issue Management (NCRs, incidents), Document Management (version-controlled procedures and work instructions), Audit Management (planning, access rights, NCR handling), CAPA Management (corrective/preventive actions with filtering), and data-driven dashboards for QHSE performance and safety responsibility. It supports compliance with industry standards such as ISO 27001, and the platform itself is ISO 27001 certified. It offers web access plus iOS/Android mobile apps so users can manage tasks remotely. The product is positioned as helping organizations structure management systems, collaborate with colleagues and external experts, and drive continuous improvement through centralized data analysis.
RESEARCHED BUILD PROMPT
Give this to your coding agent.
Build a replacement for Qooling, a QHSE (Quality, Health, Safety, Environment) management platform. Workflow: admins configure the system, users log issues/NCRs, teams maintain version-controlled documents, auditors run checklist-based audits that generate NCRs, and CAPA items are tracked to closure with dashboards for leadership. User-facing requirements: (1) role-based access (admin, manager, auditor, employee), (2) issue logging with severity, status, attachments, assignment, and history, (3) document management with version history, approval workflow, and user acknowledgment, (4) audit module with plan, reusable checklist templates, and one-click NCR creation, (5) CAPA board with filters, due dates, owners, and email notifications, (6) dashboards showing incident trends, open CAPAs, and audit completion rates. Technical requirements: React + TypeScript frontend, Node.js (Express or NestJS) API, PostgreSQL, JWT auth, and a mobile-responsive PWA (no native apps). Implementation approaches: use a relational schema with users, roles, issues, documents, audits, checklists, and CAPAs; REST API with pagination and audit logs; background jobs for email reminders. Do not copy Qooling's brand, logo, copy, or UI design — create an original, clean, accessible interface. Out of scope: native iOS/Android apps, SSO, offline sync, and multi-tenant billing. Deliver a README covering setup, seed data, demo accounts, and known limitations.