Logintake is a purpose-built intake and audit pipeline — not a login product and not a generic form builder. Admins compose multi-step intake streams in a visual drag-and-drop editor, publish a shareable public link, and collect resumable submissions across devices. Every interaction is written to an append-only audit trail, and completion fires an HMAC-signed webhook with retry backoff.
Logintake turns multi-step forms into resumable, snapshot-isolated submissions — with an append-only audit trail behind every interaction.
An admin builds a multi-step intake blueprint in a drag-and-drop editor (dnd-kit) with 10 field kinds and shared Zod validation.
Publishing freezes a blueprint_snapshot; in-flight runs are immune to later edits. A shareable public link is generated.
Submitters fill the form across devices via an opaque resume token, with step data autosaving on an 800ms debounce.
On completion, an HMAC-SHA256-signed payload POSTs to the customer's receiver, with retry backoff via Vercel Cron.
Every action — started, step_saved, upload.received, completed — writes an immutable row to log_events with timestamp, IP hash, and user-agent. There are no UPDATE or DELETE policies by design, producing an eDiscovery-grade record.
Submissions resume across devices via an opaque token. At start, the stream blueprint is frozen into a blueprint_snapshot, so editing the parent stream can never alter an in-flight run. Step data autosaves with an 800ms debounce.
One set of Zod schemas validates 10 field kinds on both client and server — publish endpoints re-validate the entire blueprint before writing. The visual builder surfaces real-time validation badges as fields are reordered via dnd-kit.
On completion, Logintake POSTs an HMAC-SHA256-signed payload to the customer's receiver with a 3-second timeout. Failed deliveries retry on a 1m/5m/15m/1h/6h backoff via Vercel Cron, with every attempt recorded and a manual retry available.
Every action — submission.started, step_saved, upload.received, completed — writes an immutable row to the log_events table with timestamp, IP hash, and user-agent. There are no UPDATE or DELETE policies by design, producing an eDiscovery-grade record. Tables live in a dedicated logintake Postgres schema under row-level security, and 100 unit tests cover validation, upload sanitization, and webhook HMAC determinism.
A no-code intake builder that turns multi-step forms into resumable, tamper-evident submissions — every action written to an append-only audit log.