This MVP was autonomously generated by MVP Factory v11 using a free-tier AI API (NVIDIA / Kimi K2.5). Simple logic runs for real. Complex external dependencies are stubbed so the app always works.

# Option A: Supabase (Postgres, free tier)
npm install @supabase/supabase-js
# In each route: import { createClient } from '@supabase/supabase-js'
# Replace the mock array with: const { data } = await supabase.from('table').select()

# Option B: PlanetScale (MySQL, free tier)
npm install @planetscale/database

Look for // TODO: replace with DB comments in src/app/api/**/route.ts

// In any API route, replace the hardcoded AI string with:
const res = await fetch('https://integrate.api.nvidia.com/v1/chat/completions', {
  method: 'POST',
  headers: { 'Authorization': `Bearer ${process.env.NVIDIA_API_KEY}`,
             'Content-Type': 'application/json' },
  body: JSON.stringify({
    model: 'moonshotai/kimi-k2.5',
    messages: [{ role: 'user', content: yourPrompt }],
    max_tokens: 1024
  })
});
const { choices } = await res.json();
return NextResponse.json({ result: choices[0].message.content });

Add NVIDIA_API_KEY=your_key to .env.local

npm install next-auth
# 1. Create src/app/api/auth/[...nextauth]/route.ts with your provider
# 2. Replace localStorage.setItem("auth_token",...) in auth/page.tsx with signIn()
# 3. Replace localStorage.getItem("auth_token") in dashboard/page.tsx with useSession()

npm install resend
# Replace the { sent: true } mock in notification routes with:
# await resend.emails.send({ from: 'you@domain.com', to: email, subject, html })

npm install stripe @stripe/stripe-js
# Replace demo payment routes with real Stripe checkout sessions

All the UI is already wired up. Every form already calls the right API route. You only need to swap the stubbed returns for real implementations.

Small business owners lack HR infrastructure and legal knowledge to properly document employee misconduct, theft, or safety violations, exposing them to expensive wrongful termination litigation and regulatory penalties

• ❌ Fear of wrongful termination lawsuits costing $50k+
• ❌ Uncertainty about what legally constitutes 'documentation'
• ❌ No budget for HR consultant ($150-300/hr)
• ❌ Previous bad experiences with problem employees they couldn't fire properly
• ❌ Anxiety about unemployment claims and regulatory audits

Jurisdiction-aware incident wizard with conditional branching logic that adapts questions based on incident type (theft/misconduct/safety) and state-specific legal requirements

Legally-compliant PDF report generator with embedded digital signatures, witness statement attachments, and tamper-evident audit trails

Compliance validation engine that scans documentation for missing legal elements (dates, witnesses, prior warnings) before allowing report finalization

Corrective action plan builder with severity-based disciplinary templates and progressive discipline tracking linked to incident history

Secure evidence portal with time-stamped photo/video uploads and chain-of-custody documentation for theft or safety incidents

Attorney-ready export formatter that packages incidents into legal-standard documentation bundles for outside counsel review

Employee history dashboard showing prior incidents, warnings, and performance patterns to establish documentation patterns for termination decisions

A step-by-step breakdown of how each feature is built. Use this as your dev roadmap.

What it does: Jurisdiction-aware incident wizard with conditional branching logic that adapts questions based on incident type (theft/misconduct/safety) and state-specific legal requirements

How to implement:

Potential enhancements:

• ⚡ Cache repeated lookups with unstable_cache or Redis
• 🔒 Add rate limiting to /api/jurisdiction-aware-incident-wizard-with-conditional-branching-logic-that-adapts-questions-based-on-incident-type (e.g. Upstash Ratelimit)
• 📱 Make the UI section responsive-first (mobile breakpoints)
• 📊 Log feature usage to analytics (Plausible / PostHog)
• 🧪 Add an integration test for the API route

What it does: Legally-compliant PDF report generator with embedded digital signatures, witness statement attachments, and tamper-evident audit trails

How to implement:

Potential enhancements:

• ⚡ Cache repeated lookups with unstable_cache or Redis
• 🔒 Add rate limiting to /api/legally-compliant-pdf-report-generator-with-embedded-digital-signatures-witness-statement-attachments-and-tamper-evident-audit-trails (e.g. Upstash Ratelimit)
• 📱 Make the UI section responsive-first (mobile breakpoints)
• 📊 Log feature usage to analytics (Plausible / PostHog)
• 🧪 Add an integration test for the API route

What it does: Compliance validation engine that scans documentation for missing legal elements (dates, witnesses, prior warnings) before allowing report finalization

How to implement:

Potential enhancements:

• ⚡ Cache repeated lookups with unstable_cache or Redis
• 🔒 Add rate limiting to /api/compliance-validation-engine-that-scans-documentation-for-missing-legal-elements (e.g. Upstash Ratelimit)
• 📱 Make the UI section responsive-first (mobile breakpoints)
• 📊 Log feature usage to analytics (Plausible / PostHog)
• 🧪 Add an integration test for the API route

What it does: Corrective action plan builder with severity-based disciplinary templates and progressive discipline tracking linked to incident history

How to implement:

Potential enhancements:

• ⚡ Cache repeated lookups with unstable_cache or Redis
• 🔒 Add rate limiting to /api/corrective-action-plan-builder-with-severity-based-disciplinary-templates-and-progressive-discipline-tracking-linked-to-incident-history (e.g. Upstash Ratelimit)
• 📱 Make the UI section responsive-first (mobile breakpoints)
• 📊 Log feature usage to analytics (Plausible / PostHog)
• 🧪 Add an integration test for the API route

What it does: Secure evidence portal with time-stamped photo/video uploads and chain-of-custody documentation for theft or safety incidents

How to implement:

Potential enhancements:

• ⚡ Cache repeated lookups with unstable_cache or Redis
• 🔒 Add rate limiting to /api/secure-evidence-portal-with-time-stamped-photo-video-uploads-and-chain-of-custody-documentation-for-theft-or-safety-incidents (e.g. Upstash Ratelimit)
• 📱 Make the UI section responsive-first (mobile breakpoints)
• 📊 Log feature usage to analytics (Plausible / PostHog)
• 🧪 Add an integration test for the API route

What it does: Attorney-ready export formatter that packages incidents into legal-standard documentation bundles for outside counsel review

How to implement:

Potential enhancements:

• ⚡ Cache repeated lookups with unstable_cache or Redis
• 🔒 Add rate limiting to /api/attorney-ready-export-formatter-that-packages-incidents-into-legal-standard-documentation-bundles-for-outside-counsel-review (e.g. Upstash Ratelimit)
• 📱 Make the UI section responsive-first (mobile breakpoints)
• 📊 Log feature usage to analytics (Plausible / PostHog)
• 🧪 Add an integration test for the API route

What it does: Employee history dashboard showing prior incidents, warnings, and performance patterns to establish documentation patterns for termination decisions

How to implement:

Potential enhancements:

• ⚡ Cache repeated lookups with unstable_cache or Redis
• 🔒 Add rate limiting to /api/employee-history-dashboard-showing-prior-incidents-warnings-and-performance-patterns-to-establish-documentation-patterns-for-termination-decisions (e.g. Upstash Ratelimit)
• 📱 Make the UI section responsive-first (mobile breakpoints)
• 📊 Log feature usage to analytics (Plausible / PostHog)
• 🧪 Add an integration test for the API route

User Request
      │
      ▼
  Next.js Edge ──► API Route ──► Business Logic ──► Data Store
      │                               │
  React UI ◄────────────────── Response / JSON
      │
  Real-time UI Update

MVP Factory Validation Report — 2026-03-04
═══════════════════════════════════════════════════════

✅ PASS  Market Demand             ████████░░ 8/10
✅ PASS  Competition Gap           ████████░░ 8/10
✅ PASS  Technical Feasibility     █████████░ 9/10
✅ PASS  Monetization Potential    ███████░░░ 7/10
✅ PASS  Audience Fit              █████████░ 9/10

─────────────────────────────────────────────────────
         OVERALL SCORE  ████████░░ 8.2/10
         VERDICT        🟢 BUILD — Strong market opportunity
         TESTS PASSED   5/5
═══════════════════════════════════════════════════════

Why this works: Strong Reddit validation (732 upvotes, 678 comments) proves acute demand. Clear blue ocean: existing HR tools target enterprise or are generic templates without legal guardrails. High-stakes B2B problem justifies SaaS pricing ($39-49/month) as 'legal insurance.' Technical implementation straightforward with document generation libraries. Main risk is sporadic usage (incidents are rare), but retention solved by positioning as 'always-ready compliance vault' and adding employee record-keeping features for ongoing use.

Unique angle: 💡 Legal guardrails approach: Unlike template libraries, this actively prevents legal mistakes by enforcing documentation standards in real-time during emotional/stressful incidents, specifically designed for non-HR small business owners

Competitors analyzed: BambooHR (expensive, complex enterprise features, not incident-focused), LegalZoom (static templates only, no guidance or validation), HRdirect/SmartBiz (compliance forms without interactive guidance or state-specific logic)

Next.js 14 App Router + TypeScript + TailwindCSS + Lucide-react

# Clone & install
git clone https://github.com/guyromb/shieldhr.git
cd shieldhr
npm install

# Start development
npm run dev
# → http://localhost:3000

# Build for production
npm run build
npm start

# Add your keys here
NEXT_PUBLIC_APP_NAME=ShieldHR

Contributions are welcome! Here's how:

1. Fork the repo
2. Create your branch: git checkout -b feature/amazing-feature
3. Commit: git commit -m 'Add amazing feature'
4. Push: git push origin feature/amazing-feature
5. Open a Pull Request

MIT License — see LICENSE for details.