I want to roll out a QR-code-driven guard tour system that several client companies can share without ever seeing one another’s data. Guards will work with an Android app; supervisors and admins will operate from a responsive web portal. How it should work • Each checkpoint carries a unique QR code. When a guard scans, the system records a time-stamped check-in or check-out. • Guards can open an incident screen right after a scan, attach photos or short notes, and flag the severity. • Only “critical” flags—missed checkpoints, panic button, or incidents marked Critical—should trigger push or browser-side alerts. Routine events simply log to the timeline. Multi-tenant needs The backend must let me create separate companies, each with its own logo, user roles, routes, and reporting. A super-admin level should let me switch between tenants and run global health checks without touching private data. Data & reporting Logs, incident records, and location breadcrumbs should stay searchable and exportable (CSV/PDF). I will also need a dashboard that shows live guard status, last scan time, and open critical incidents. Deliverables • Android app (APK + source) ready for the Play Store • Web portal (front-end, back-end, database schema) deployed on my preferred cloud stack • API documentation so I can integrate with existing HR and payroll tools • Quick-start admin guide covering tenant setup, user roles, and notification rules Acceptance criteria 1. Scan to log latency under 3 seconds on 4G. 2. Separate test shows Company A cannot query or view Company B data. 3. Critical incident pushes reach devices/web within 10 seconds. 4. Daily report can be generated and downloaded without errors. If this outline is clear, the next step is to move straight into architecture planning and milestone scheduling.