Hi everyone,
I run a same-day courier service in the UK (approx 20 active drivers and growing on the road at once, 2 office dispatchers, a few hundred customer accounts).
A few months ago, I started experimenting with Claude to see if I could build a custom TMS as a sort of side-hobby. I’ve somehow ended up with a fully functional system: a React/Next.js web portal, a React Native driver app with live GPS tracking (pinging every 2 minutes only if the driver is moving), and a prisma schema linked to a Supabase backend. It's actually better and more modern than what we use now.
I want to officially transition the business to this system at the end of this year, but I’m terrified of breaking something critical, or something going wrong while I'm unavailable. I have a total £500/month budget to maintain it.
As someone with no real coding experience, I need your opinions on how to structure the production rollout safely. Specifically:
1. Infrastructure & Monitoring
The Plan: Upgrading to Supabase Pro and Vercel Pro. Subdomains handled by Vercel. The database structure and migrations are managed by via Prisma Schema.
The Question: For a real-time driver tracking app (20 drivers pinging location data), what are the baseline monitoring, error-tracking (Sentry?), and uptime alerting tools I need to set up so I know the system is down before a driver calls me?
2. Bringing on a Freelance Developer
The Plan: I want to hire a mid-level JS/Supabase dev on a monthly retainer to act as emergency backup when I’m unavailable, and review new code updates monthly before they are pushed to the live app.
The Question: How do developers feel about being onboarded to an entirely AI-generated codebase? How should I structure the repo (linting, documentation) so a human dev doesn't look at it and immediately run away?
3. Security & UK GDPR
The Plan: Enabling Row-Level Security (RLS) on all Supabase tables. Using public anon keys on the client and keeping service_role secrets hidden. Purging/anonymising driver GPS logs after 90 days.
The Question: Because we handle live UK telemetry and home addresses, security is non-negotiable. What automated vulnerability tools (Snyk, Dependabot) or specific Supabase audit steps should I run to ensure I haven't left a massive security hole open?
The user, who runs a courier service, has developed a custom TMS using Supabase, React Native, and Next.js. They seek advice on safely transitioning this system to production within a £500/month budget. Key concerns include infrastructure monitoring, hiring a freelance developer for support, and ensuring security compliance with UK GDPR.
Would be great to get some advice from anyone who has taken an AI-built prototype into production, or any devs who can tell me what blind spots I’m missing here. Thanks!