Y-app — multi-tenant ERPNext werkomgeving
Y-app — e-mail, ERP en projecten in één app
Y-app — dashboard met financiële overzichten

What is Y-app?

Y-app is not a chat tool and not a standalone ERP frontend. It's an "Everything-app" — a multi-tenant ERPNext workspace that bundles your entire business stack into a single web application. Email (IMAP/SMTP + Office 365), ERP (ERPNext), files (NextCloud), chat (Teams, NextCloud Talk, Telegram), calendar, an AI assistant (Claude) and dozens of business modules — all reachable from a single browser tab.

  • Multi-tenant — connect multiple ERPNext instances to a single Y-app account
  • Encrypted vault — credentials in a server-side SQLite database with AES-256-GCM, PBKDF2-SHA256 (210k iterations)
  • No browser tabs needed — switch between instances via in-app tabs, each with its own routing and session
  • Employer or employee mode — restrict modules per instance via a dropdown
  • Full NL/EN i18n — 1190+ translations, switchable at runtime

How it works

Y-app runs on your own server (or via impertio.app). Self-signup, instance management and mode switching all happen inside the app — no IT tickets needed.

1

Create a Y-app account

Self-signup with email and password. Bcrypt with 12 rounds, HttpOnly session cookies, session-scoped credential cache.

2

Add ERPNext instances

For every company or client: URL, name, colour and credentials. Encrypted immediately in the server-side vault.

3

Switch via in-app tabs

No browser tabs: switch between instances inside Y-app. Each tab keeps its own routing state, ERPNext session and cache.

4

Employer or Employee mode

Switch per instance between the full module set (Employer) or a restricted set for staff (Employee).

Multi-tenant and encrypted — not even the host can read your credentials

Y-app runs on a zero-knowledge principle for your ERPNext credentials. Every combination of email, ERPNext key and OAuth2 token is encrypted in a server-side SQLite vault with a master key that can only be decrypted with your Y-app password.

  • AES-256-GCM — authenticated encryption for every credential
  • PBKDF2-SHA256, 210,000 iterations — the current OWASP recommendation for key derivation
  • Master key file with mode 600 — readable only by the Y-app process
  • AsyncLocalStorage per request — credentials are never shared between users in the same Node process
  • Not even the host can see your data — without your login the vault is a blob of random bytes
  • One account, multiple companies — ideal for accountants, consultants, holdings and franchise organisations

What's inside? — the modules

Y-app bundles dozens of modules across seven domains. Every module is connected directly to the active ERPNext instance — no separate logins, no separate URLs.

Communication & Collaboration

Webmail

Full-featured IMAP/SMTP client with caching, folder management, attachments, rich-text editor, templates and signatures. Password auth or Office 365 OAuth2.

Messenger

Multi-platform chat: NextCloud Talk, MS Teams (Graph API), Telegram (Bot API). One overview for every conversation.

Contacts

Merged contact database from ERPNext and email history. One source for customers, suppliers and colleagues.

Letters

Document generation with templates: standard letter, quote, order confirmation, payment reminder.

Meeting minutes

Local storage with agenda, action items, deadlines and links to projects and tasks.

Projects & Tasks

Projects with map view

Leaflet map with project locations, status tracking and task counters per project.

Tasks

Full CRUD with status, priority, sorting, filtering and assignment to staff.

Subtasks

Nested task structure for breaking down more complex work packages.

Planning (Gantt)

Week or multi-week view with drag-and-drop, staff filter, priority colours and holiday integration.

Quotes

Quote overview with filters and detail view, connected directly to ERPNext Quotation.

Sales orders

Order confirmations and status tracking — from quote to delivery note.

Delivery notes

Delivery status and customer linking for shipping and logistics planning.

Leads

Lead management and qualification, with follow-up actions and conversion to opportunity.

Todo

Personal task list per user — separate from project tasks.

HR & Staff

Employees

Full staff overview with photo, contact details, contracts and leave allocations.

Leave planning

Leave requests and allocations in calendar view, with overtime registration.

Expense claims

Submit, approve and pay out expense claims — including attachments.

Time tracking

Log hours with project linking, billable/non-billable, a "Now" button and an approval workflow.

Payroll

Payroll tax and salary reports per period.

Finance & Accounting

Financial dashboard

Revenue charts per project or employee, billable %, top customers and monthly trends.

Revenue

Monthly revenue trends with year-over-year comparison.

Sales invoices

Outstanding invoices with ageing analysis (0-30, 31-60, 61-90, 90+ days) and email reminders.

Purchase invoices

Register, approve and pay supplier invoices.

Outstanding

Accounts receivable analysis with payment terms and reminder status.

Cost insight

Cost analysis and trending per cost centre or project.

General ledger

Chart of accounts and journal entries — navigable chart of accounts.

Bank transactions

Bank statements and reconciliation against outstanding items.

Booking program

Enter journal entries and memorial postings directly.

VAT return

Quarterly VAT calculation based on tax accounts.

Annual accounts

Year-end closing, balance sheet and profit-and-loss statement.

Profitability

Per-project and per-customer profitability analysis.

Liquidity

Cash-flow forecast based on outstanding items and expected payments.

Files & Knowledge

NextCloud Files

WebDAV file browser with folder navigation, preview, upload/download and share links.

Wiki

Markdown knowledge base with search, publish/unpublish and rich rendering.

Calendar

Multi-source calendar

ERPNext events, tasks, leave and timesheets plus iCalendar (ICS) feeds and Office 365 OAuth2 — everything in one calendar.

Month, week or day view

Switch between overviews, filter by source and schedule meetings in a click.

Jitsi video meetings

Generate a Jitsi Meet link directly in the invite — no extra accounts needed.

System & DevOps

AI Agent (Claude)

Claude AI assistant with context on your ERPNext data. SSE streaming, file context and multi-turn conversations.

Terminal

WebSocket shell (PowerShell or bash) per active instance — handy for admins and developers.

Health check

Status monitoring per instance, IMAP and OAuth2 token validation.

Global search (Ctrl+K)

Search across all ERPNext records of the active instance — from any screen.

Instance management

Add, edit or remove instances yourself. No IT ticket needed.

NL / EN i18n

Fully translated with 1190+ translations, runtime language switching via react-i18next.

Employer vs Employee mode

Per instance you choose in a dropdown whether the user gets employer access (all modules) or employee access (a restricted set, focused on their own tasks).

Module Employer Employee
Webmail, Messenger, ContactsYesYes
Projects & Tasks & PlanningYesYes
Time tracking & Expense claimsYesYes
Calendar & Meeting minutesYesYes
NextCloud Files & WikiYesYes
Quotes, Sales orders, Deliveries, LeadsYesLimited
Employees, Leave planning, PayrollYesNo
Financial dashboard, Sales/Purchase invoices, OutstandingYesNo
General ledger, Bank transactions, VAT, Annual accountsYesNo
Profitability & LiquidityYesNo
Terminal & AI AgentYesNo

Integrations

Y-app talks to the tools you're probably already using — no lock-in, no migration.

ERPNext

REST API and session bridge — every DocType available.

Office 365

OAuth2 + Microsoft Graph API for mail and calendar.

NextCloud

WebDAV + OCS API for files, talk and share links.

Telegram

Bot API for business chat and notifications.

Jitsi Meet

URL generation for video meetings, no account needed.

Claude AI

CLI spawning + SSE streaming with ERPNext context.

iCalendar (ICS)

Read external feeds into the Y-app calendar.

Technology

React 19 TypeScript Vite 7 TailwindCSS 4 react-router-dom 7 react-i18next Node.js 20+ Express 4 WebSocket (ws) better-sqlite3 bcryptjs (12 rounds) AES-256-GCM PBKDF2-SHA256 (210k) AsyncLocalStorage SQLite (WAL) Leaflet + react-leaflet xterm.js PM2 tsx --watch nginx

React 19 + TypeScript + Vite 7 + TailwindCSS 4 on the frontend, Node.js 20 + Express 4 + WebSocket on the backend. Authentication via bcryptjs (12 rounds), HttpOnly cookies and AsyncLocalStorage for per-request credential scoping. Encryption with AES-256-GCM and PBKDF2-SHA256 (210k iterations), data in a SQLite database (WAL mode). Production runs under PM2, behind an nginx reverse proxy with TLS termination, WebSocket upgrade and static dist serving. Development via tsx --watch.