Multi-tenant RAG SaaS. Python/FastAPI, Next.js, Supabase/pgvector. Full client isolation via Row Level Security. Per-tenant config set in admin panel: - AI mode: Cloud (Claude API), Local (Ollama/Mistral on client infra), or Hybrid (operational docs via cloud, sensitive docs flagged by category to local). Mode switch takes effect immediately, no redeploy. - Connectors: toggle OneDrive, Gmail, Outlook, Slack, WhatsApp per tenant. Each stores its own OAuth credentials encrypted. - Branding: logo initials, accent colour, company name, subdomain. - User roles per tenant: admin, analyst, viewer. - Pipeline confidence threshold per tenant (default 0.80). Six-phase pipeline: ingest, acquire (OCR/Whisper/pdf-parse), classify, extract entities, summarise, embed (pgvector). Routing logic: if mode=hybrid, classification phase checks document category against tenant's sensitive-category list and routes accordingly to Claude API or local Ollama endpoint. Admin dashboard: create/suspend tenants, set all config above, monitor pipeline per tenant, view ingestion errors. Client dashboard: semantic search, document library, daily briefing. Docker image. Clean modular Python. No vibe coding. Fixed $1,000. 3 weeks.