One platform.
Every tool built in-house.

Devalo doesn't stitch together third-party services and call it a platform. Every module — CRM, marketing, scheduling, sales, finance — is purpose-built, fully integrated, and shares a single unified data layer.

🔨

Built In-House

No Xero integration. No DocuSign plugin. No MYOB connector. If it's a core business tool, we build it ourselves. That means it works exactly how you need it to, and every module talks to every other module natively.

🔗

Unified Data Layer

When a customer books an appointment, it automatically updates their CRM record, triggers a marketing sequence, and logs the interaction. No Zapier glue code, no manual data entry, no sync failures.

🧩

Modular by Design

Start with what you need today. Add modules as your business grows. Disable what you don't use. Your data is always preserved — modules are switches, not demolition crews.

The tools inside

📊 Live

Sales Scoreboard

Real-time performance tracking that turns sales data into motivation. Weekly and monthly leaderboards, configurable KPIs, team comparisons, and a dedicated kiosk mode for TV displays in your showroom or office.

  • Real-time leaderboards with configurable periods
  • Kiosk/TV display mode with auto-hiding cursor
  • Role-based access — managers enter data, staff view
  • Gamification elements to drive healthy competition
📅 Coming Soon

Calendar & Bookings

Multi-provider scheduling with public booking pages your customers can use. Automated reminders via email and SMS, calendar sync, and smart availability management.

  • Public booking pages with custom branding
  • Multi-provider support with individual availability
  • Automated email and SMS reminders
  • Seamless CRM integration — every booking creates a contact record
📧 Coming Soon

Marketing Automation

Email and SMS campaigns that actually get delivered. Built-in consent management for Australian privacy regulations, audience segmentation using your CRM data, and deliverability tracking so you know what's working.

  • Email campaigns via Amazon SES
  • SMS campaigns via Twilio
  • Audience segmentation from CRM data
  • Full consent management and opt-out handling
💰 Coming Soon

Finance Brokerage

A compliance-ready deal pipeline for Australian asset finance and mortgage brokers. Runs on a completely isolated database — a requirement for Australian Credit Licence holders. 12-stage pipeline with full audit trails.

  • Isolated database for ACL compliance
  • 12-stage configurable deal pipeline
  • Full audit trail on every action
  • Asset finance and mortgage product support
👥 Planned

CRM & Contacts

The connective tissue of the platform. Unified contact management with interaction timelines that pull from every module — bookings, campaigns, deals, and scores all in one place.

  • Unified contact records across all modules
  • Interaction timeline with full history
  • Smart segmentation for marketing
  • Bidirectional sync with finance pipeline
Security

Security that's engineered, not marketed

Organisations trust Devalo with their customer data, financial records, and business operations. That trust is earned through engineering decisions, not marketing claims.

Password Security

  • Argon2id hashing with server-side pepper
  • 12-character minimum, 4-of-5 complexity
  • Breach checking against Have I Been Pwned
  • Progressive delays + account lockout

Session Management

  • SHA-256 hashed tokens (never stored raw)
  • Inactivity timeouts + device fingerprinting
  • Concurrent session limits (max 5)
  • Explicit session revocation

Two-Factor Authentication

  • Enforced for every user
  • TOTP, WebAuthn passkeys, email codes
  • Individually hashed backup codes
  • High-security actions require TOTP/passkey

Encryption

  • AES encryption for sensitive fields
  • Encryption key from env, never in code
  • Per-organisation data isolation
  • No cross-tenant access possible

Audit Trail

  • Every mutation logged immutably
  • Old and new values captured
  • Login attempts (success + failure)
  • Cannot be modified or deleted via API

API Hardening

  • Pydantic response models (whitelist fields)
  • Sanitised error messages
  • Rate limiting on auth endpoints
  • CORS restricted to configured origins

See it in action

Book a demo and we'll walk you through exactly how Devalo would work for your business.