My own product · Free for now
Clients, contracts and passwords, in one place.
An all-in-one CRM for small businesses, with a password vault, contract signing and a Codex plugin.
Hermios keeps a small business’s clients, deals, tasks and follow-ups in one workspace, with a vault for the team’s passwords and 2FA codes beside them. It is built on Twenty, the open-source CRM. I added the vault, contract signing, account health and a Codex plugin, and I run it. I first built it for a business partner; it is now my own product.
No tech knowledge needed · 15 minutes · you keep the map either way.
- Best for
- Small teams who keep clients in one tool, contracts in another and passwords in a shared note.
- Problem
- Client details, signed paperwork and logins sit in separate places, and nobody can see who opened what.
- Changed
- One workspace for clients, deals and contracts, with passwords kept encrypted and every reveal recorded.
Three tools for one client.
A small business usually keeps its clients in a spreadsheet or a CRM, its contracts in email and a signing tool, and its passwords in a shared document or someone’s head.
Each handover between them is manual. When a client signs, someone has to remember the next step. When a staff member leaves, nobody is sure which logins they knew.
How it works.
One workspace per business
Each business gets its own workspace and web address. Its records are kept apart from every other workspace.
Clients, deals and contracts together
Contacts, companies, deals, tasks and notes sit side by side. A contract shows on the client it belongs to.
Passwords in the same place
Logins and 2FA codes live in the vault, encrypted. Each reveal is checked against the person’s role and recorded.
A client, their contract and their logins.
The deal, the contract’s progress and the vault entry sit on one record. The password stays hidden until someone with access asks for it.
What it does.
The core CRM comes from Twenty. These are the parts I built on top of it.
Password vault
Store passwords, API keys and 2FA setup keys. Generate the current 2FA code, generate strong passwords and see when a login is due for a change.
Access history
Every reveal, change and removal is logged against the person who made it. If the log cannot be written, the secret is not shown.
Contract signing
Send a contract for e-signature from the client record and follow it from Sent to Viewed to Signed. The signed PDF is filed and a follow-up task is created. In pilot with one workspace.
Account health
Each company shows its open pipeline, deals at risk and last contact, flagged after 14 quiet days. Deal reviews record a verdict and confidence.
Codex plugin
Work with contacts, deals, tasks and follow-up drafts from inside Codex, signed in with your own Hermios account and limited to your role.
Pipeline and automation
Deal stages, table and board views, custom fields, workflows, and Gmail or Outlook email and calendar sync, from Twenty.
Where it stands.
- Status
- Free for now
- Contract signing
- In pilot with one workspace
- Codex plugin
- Public preview, installed from its own marketplace
- My role
- Product design, engineering and operation
How the data is protected.
Each vault secret is encrypted on its own (AES-256-GCM). A reveal is checked against the person’s role, limited to 30 a minute and recorded. Workspace admins can recover vault entries, for example when someone leaves. Codex and other AI tools see the names of vault entries, never the secrets. The server has no open public ports, the database connection is encrypted and verified, and backups run nightly with a weekly test restore. Sign-up needs email verification. The plugin asks before it sends email or contracts, deletes, or changes more than five records.
How it is built.
- Base
- Twenty, the open-source CRM (TypeScript, React, NestJS)
- Database
- Postgres in Sydney, connected over verified TLS
- Hosting
- A Sydney server behind a Cloudflare Tunnel; private file storage
- AI access
- A Codex plugin and an MCP server, signed in with OAuth
Want your clients, paperwork and logins in one place?
Hermios shows how I build: start from proven open-source software, add what the business is missing, and keep secrets out of the AI’s reach. Bring the tools your team juggles today.
No tech knowledge needed · 15 minutes · you keep the map either way.