The unified operating system
for every business.
One platform for CRM, marketing automation, store operations, and AI-powered call intelligence. Twelve composable Si* products on a multi-tenant cloud, engineered for enterprise-grade compliance and built to run hundreds of locations as one.
Why SiWorks
Built for the operators who run hundreds — or thousands — of locations.
SiWorks is the commercialization of a platform that already powers real customer-facing operations at scale. Every architectural decision was stress-tested in production before it shipped here.
Multi-tenant by design
Every tenant, fully isolated
Each customer organization runs inside its own dedicated data partition, with cryptographic identity boundaries enforced before any read or write reaches storage. Onboarding a new customer is a single API call — not a migration, not a cluster spin-up, not a change-management ticket.
- Per-tenant data partition · row-level isolation
- Identity-bound API gateway · zero cross-tenant access
- Per-tenant audit, rate limit, retention policies
Cloud-native runtime
Serverless throughput. Predictable spend.
Built on Google Cloud's serverless stack — compute scales to zero when idle and to peak when demand hits, with no warm-up and no over-provisioning. Identity federation between every layer means no static credentials live in CI, in code, or in env files. One bill from one cloud, predictable as you grow.
- Auto-scaling compute · 99.9% target availability
- U.S. data residency · region-pinned by policy
- Identity-federated CI/CD · no static credentials
Enterprise-grade security
Compliance baked into the core
Every privileged action is recorded in a tamper-evident audit trail, sealed against modification. Multi-factor authentication is enforceable per tenant, customer-data access is gated and reported, and every credential lives in a centrally-managed vault — never in code, never in environment variables.
- Tamper-evident audit trail · append-only
- Enforceable MFA · CPNI access gating
- Managed WAF · CSP · HSTS · centralized secrets
The Si* Lineup
Twelve products. One control plane.
Install only what each customer needs. Every Si* product shares identity, data, billing, and audit. Add SiReserve in the morning; the menu, the schema, and the role permissions are live by lunch.
SiCRM
CoreUnified customer database powered by BigQuery, with 5-language search, segments, and per-tenant isolation.
SiDashboard
CoreExecutive KPI cockpit. Real-time visit, revenue, and activation trends across every store.
SiMessages
MarketingA2P 10DLC SMS/MMS at scale — opt-in management, scheduling, and approval workflows built in.
SiCallLog
AnalyticsNewTwilio-tracked ad numbers, per-source attribution, and store-level routing logs — every campaign dollar mapped to a real outcome.
SiCallAI
IntelligenceNewDual-channel call recording with AI transcription, sentiment analysis, and coaching insights surfaced for every conversation.
SiSocial
MarketingMeta and Instagram lead capture, social analytics, and creative performance attribution.
SiWaiting
OperationsStore visit queue with iPad kiosk, public TV display, and SMS-driven turn-by-turn updates.
SiReserve
OperationsOnline reservations with time-slot capacity, automated reminders, and no-show tracking.
SiSurvey
AnalyticsMultilingual NPS, token-secured links, post-visit auto-send, and trended sentiment.
SiReports
AnalyticsAuto-generated branded .docx and dashboards. One-click export, GCS-archived, sharable.
SiTeams
CollabTeam chat with channels, DMs, and announcements wired into the platform identity model.
SiStaff
OperationsStaff registry, shift scheduling, attendance, and store-level performance tracking.
The customer relationship, written one message at a time.
SiMessages turns every touchpoint — first sign-up, reservation reminder, post-visit thank-you, win-back, renewal — into a personalized SMS or MMS exchange. Segments come straight from SiCRM, sends ride Twilio A2P 10DLC with carrier-grade compliance built in, and every reply lands back inside the customer record.
No batch-and-blast. No second audience platform. The same record that knows the customer just walked in is the one that decides what to say next.
No second audience tool. Build a segment once — first-time visitors inactive 14 days, opted in for SMS, eligible for trade-in — and SiMessages targets it directly.
Brand and Campaign registration, throughput tier handled, STOP/HELP/quiet hours auto-enforced. We never ship a message the carriers will block.
Members draft. Admins approve. Every send is recorded in the audit log with who wrote it, who approved it, and when it went out.
- A2P 10DLCverified
- STOP / HELP keywordsauto-honored
- Quiet hours9 PM – 8 AM local
- Audit logevery send
Phase 7 adds AI-drafted message variants per segment, A/B-tested automatically. Today, every word is yours — and every reply lands back in SiCRM ready for the next move.
Every customer call.
Tracked, recorded, understood.
SiCall is one Twilio-native portal — seven pages, twenty-one APIs, six webhooks — for every customer call. Tracking numbers, forwarding, IVR, whisper, dual-channel recording, and an async AI insight layer. Adopted from /wecancall production (released 2026-04-25).
Per-store voice and tracking spend collapses from monthly per-seat licenses into usage-only Twilio rates — billed in cents per minute, not hundreds per seat.
One door for visits, reservations, and staff.
SiHub is the unified portal that connects four App Store products — SiWaiting, SiReserve, SiSurvey, and SiStaff — under a single entry point. Customers scan a PIN or QR; staff sign in with Firebase. The sidebar renders only the menus the role and installed apps allow, server-side, before the page ships.
Adopted from the production-hardened /wecanverse pattern (commit b7f642b) — the version that already runs the live 350K-customer fleet.
Diamond Bar — Live
Today · Tue Apr 30 · 14:23 PST
- #1Park2m
- #2Lee5m
- #3Choi8m
- 14:00Kimconfirmed
- 14:30Jungpending
- 15:00Hanarrived
Architecture
GCP-native. No surprise bills.
No third-party identity.
Every layer is on Google Cloud, in a single region, behind one Workload Identity Federation. No external auth provider, no cross-cloud egress, and one bill from the same vendor that runs BigQuery and Firebase.
- Next.js 16 · React 19
- Cloud Armor WAF
- WIF + GitHub Actions
- 42+ endpoints · OpenAPI
- @api_login_required guards
- Audit middleware (every write)
- Custom Claims · role/orgId
- TOTP MFA · 60-min sessions
- Workload Identity
- BigQuery: per-tenant datasets
- Firestore: orgs · audit · apps
- GCS: recordings · reports
Every message. Every call. Every visit. Every ad.
One customer.
Every signal SiMessages, SiCall, SiHub, and SiSocial capture flows into the same record — in the same tenant, on the same timeline, under the same identity. We call it SiOne: the single source of truth that powers every other Si* product.
One tenant. One identity. One timeline per customer. One source of truth that every other Si* product reads from and writes to.
- 08:32ADClicked Meta ad — trade-in promo · campaign WW-Q2-iphone
- 08:42SMSOutbound — trade-in offer opened by Maria
- 09:15CALLInbound from Maria · 4m 12s · sentiment positive
- 10:30VISITWalked into Diamond Bar — queue #2 · history pre-loaded
- 10:42VISITGreeted by Tony · trade-in confirmed in person
- 11:18SMSAuto thank-you sent · post-visit NPS request
- 11:51REPLYMaria → "5 — Tony was great"
Seven events. Four channels. One record. One associate who knew her name — and the campaign that brought her in — before she said hello.
Customer Interview · 2026
15 stores. +30% revenue.
One organic system.
Wecan Wireless ran the business on seven disconnected vendors before SiWorks. Today every signal — calls, walk-ins, reservations, surveys, ad attribution — lives in one tenant, and the customer, the team, and the owner all moved in the same direction at the same time.
We used to operate seven different platforms and pretend they were one business. SiWorks made them actually one. Revenue is up thirty percent, our managers are calmer, and our customers walk in feeling like we already know them — because we do.
Measurable in matched campaign dollars and conversions tracked end-to-end for the first time.
Security & Compliance
Designed for enterprise compliance — on day one.
We mapped the standard enterprise security controls into Phase 5 Sprint A as P0 tasks. Audit log, MFA, CPNI gating, granular permissions, hardened sessions, retention — all required before launch, not after.
Immutable audit log
Every read of CPNI, every write to staff and reservations, every PII export — captured automatically by middleware with user, action, resource, IP, and timestamp.
TOTP MFA, enforceable
Firebase MFA with Google Authenticator. Service Admins required. Org Admins can enforce per-org from Settings → Security in one click.
CPNI access gating
Customer detail pages prompt the operator to confirm authorized business purpose before unmasking. Every confirmation is logged and auto-reported.
Granular RBAC
Role × module permission matrix with field-level masking on phone and email. SMS sends require an approval workflow; admins approve, members draft.
Hardened sessions
60-minute default expiry, optional single-device enforcement, full HTTPS, CSP and HSTS headers. Cloud Armor in front of every request.
Records destruction policy
BigQuery retention policies aligned to industry data-retention standards. Daily Firestore backups, BigQuery snapshots, and Secret Manager for every credential.
Pricing
Per-store pricing that gets cheaper as you grow.
Every tier includes all twelve products. Twilio voice and AI inference are passed through at cost.
- All 12 Si* products
- Standard support
- BigQuery dataset · per-org
- Email + SMS · A2P 10DLC
- Everything in Starter
- Priority support
- Custom branding · subdomain
- Multi-region call routing
- Everything in Growth
- Dedicated success engineer
- AI insights (SiCallAI)
- SOC 2 export support
- Everything in Scale
- SAML SSO (roadmap)
- Dedicated audit log retention
- Quarterly business review
- Volume pricing
- Custom data residency
- Source escrow
- Architectural review board
Ready when you are
Run every store like one store.
A 30-minute walkthrough. We'll show you SiHub, SiCall, the audit log, and how to provision your first customer in under five minutes.