# Phase 2 Roadmap

## Goal

Move the Anglo-Suisse Capital prototype from a rapid internal proof-of-concept to a controlled internal beta with live integrations, stronger auditability, and more reliable operations.

## Priority 1

- Replace file-backed prototype persistence with PostgreSQL
- Store uploaded files in S3 instead of local prototype storage
- Complete live SuiteCRM V8 integration with confirmed module and field mappings
- Replace demo sign-in with Cognito or Anglo-Suisse Capital SSO

## Priority 2

- Add live Google OAuth for selected Gmail message and thread ingestion
- Add OCR for image uploads
- Improve Sales Lead search with richer live-field mapping and pagination
- Add stronger audit views for proposal history, confirmation actor, and SuiteCRM response status

## Priority 3

- Add follow-up task creation into the configured SuiteCRM task module if approved
- Add relationship mapping for campaign linkage if the target SuiteCRM instance supports it
- Add role-aware controls for administrators versus standard internal users
- Add better error recovery and retry handling for SuiteCRM outages

## UX improvements

- Add richer conversation history for assistant sessions
- Add proposal diff views so users can compare current and proposed Sales Lead values
- Add clearer multi-match resolution when several Sales Leads have similar names
- Add optional spoken assistant responses if Anglo-Suisse Capital wants a fuller voice mode

## Security and compliance improvements

- Tighten audit payload redaction
- Add configurable retention for logs and uploaded artifacts
- Add environment-specific access rules and deployment separation
- Add secret rotation guidance for OpenAI, SuiteCRM, and Google credentials

## Exit criteria for Phase 2

- Live SuiteCRM create and update flows work against the confirmed Anglo-Suisse Capital mapping
- Internal users authenticate through a non-demo identity provider
- Audit and error visibility are acceptable for internal beta use
- Uploaded documents and selected Gmail content can be processed and confirmed reliably
