with Sort Marketing · Pop Hasta Labs

01The ERP

Your ERP, built around
how you actually work.

One record per client, carrying the enquiry, the booking, the quote, the signature and the invoice — with the rest of the office behind the same wall if you want it.

We build custom CRMs for your company, with the best security infrastructure and secured, governed AI to increase your productivity.

This page describes what the ERP is and how each part works — with a working example further down that you can click through without leaving.

Al Reem Interiors Quote sent
  • Enquiry received14 Feb, 09:20
  • OwnerLayla H.
  • Site visit18 Feb, 11:00
  • QuoteAED 84,500
  • Signed21 Feb
  • InvoiceINV-1043
  • Next actionChase balance, 6 Mar
  • 30,000+ End users a month on SCRS-governed software Pop Hasta Labs' published figure
  • 6 Live industry CRMs you can open right now Click any of them below
  • 8 Services, from the CRM build to the campaigns One contract, one point of contact
  • 3 Firms behind the work, and one contract Dubai, London and Sort Marketing

02The data firewall

Client data never reaches the model.

A message carrying a real name and a real amount is tokenised before it leaves your control. The model answers the tokenised version. The answer is restored before you read it.

Most attempts at this problem are policies: a document that tells people what not to paste, an acceptable-use clause in a handbook, an annual training module everyone clicks through. They fail in the same way every time, because they ask busy people to do extra work in the moment they are most under pressure.

The firewall takes the decision away from the person. It sits in the path between your team and the model, so being protected is not something anybody has to remember to do.

The firewall is called SCRS, and it is the foundation everything else on this page sits behind.

SCRS is the proprietary, patent-pending technology of Pop Hasta Labs, London.

01

Redact

Names, companies, amounts, email addresses, phone numbers and reference numbers are replaced with tokens.

What is left is a sentence with the same shape and the same instruction, carrying none of the identity.

02

Answer

The model does its work on text that never contained a client's details in the first place.

It drafts, summarises and explains exactly as well as it did before — the task never depended on knowing who the client was.

03

Restore

The tokens are swapped back, and you read a normal answer with the real names in it.

Your colleague sees an ordinary reply, and never had to think about either of the two steps before it.

Follow a request through it →

03The governed workspace

Everything already behind the firewall.

Not a set of tools with governance bolted on afterwards — one workspace where the protection was there first.

The distinction sounds like marketing until you have watched it fail. Governance added to a product later can only cover the routes somebody thought to cover; every integration, export and mobile app added afterwards is another route that has to be remembered separately.

Here the protection was built first and the tools were put behind it. That is also why it can be one login, one directory of people and one place to change a setting rather than six accounts that half agree with each other.

Mail, projects and tasks

Inbox, boards, tasks and scheduling in one place, so the thread about a job and the job itself are not in two different systems.

Ticketing and live chat

A shared inbox with service levels, and a governed agent on your website that can answer without being handed your customer list.

AI assistants

The right model for the job, all of them governed by the same firewall, so the choice of model stops being a security decision.

Forms and automation

Capture, scheduling and the routine steps in between — the chasing and the copying that quietly eats a day a week.

People and directory

Joiners, movers and leavers without a spreadsheet, and access that actually ends on the day somebody leaves.

Control centre

Settings, storage and governance in one place you can show someone — which matters the day a client asks how their data is handled.

04The client record

One record of the client. Not five.

Deals, quotes, e-signature and invoicing, in the same governed system as the mail and the tickets — so the history of a client is in one place rather than in somebody's inbox.

Most businesses do not lack a CRM. They have four: the actual CRM, a spreadsheet somebody trusts more, a WhatsApp thread with the good customers in it, and one person who simply remembers. Every one of them is right about something and none of them agrees.

The cost shows up on ordinary days — a quote sent twice, a promise nobody recorded, a client asked the same question by two people in a week. And it shows up badly when somebody resigns and the history walks out with them.

From enquiry to signature

Capture the enquiry, work the deal, send the quote, take the signature and raise the invoice without leaving the system or re-typing the client's details.

Every step stays attached to the client, so anybody can answer "where did we get to with them" without asking three people.

Configured for your trade

A salon books differently from a property office and invoices differently from a garage. Configuring that properly is the part we do here in Dubai.

Your stages, your quote templates, your invoice numbering and your permissions — set up around how you already work rather than the other way round.

HSPHospitality

Covers, private events and the guests who come back.

A dining room, private events and rooms upstairs — run off one record per guest rather than a diary, a spreadsheet and somebody who remembers.

Capabilities

  • Bookings and covers against a full guest history
  • Private-event enquiries worked as deals, not lost in an inbox
  • Deposits, balances and what is still owed, visible
  • Follow-up that turns one visit into a regular
Open the live CRM → Book a call
Dashboard / Service board The Hoxmere A. Quill · General manager
  • 64Covers tonight
  • 2,840Guests on file
  • 12Events booked
  • 18,400Deposits held, AED
  • 7Lines below par
  • New booking
  • Seat a table
  • Take deposit
  • Order to par

Covers, last 7 days

  • Mon
  • Tue
  • Wed
  • Thu
  • Fri
  • Sat
  • Sun

Service tonight 64 of 80 covers

  • 18:00 22 covers 6 tables
  • 19:30 30 covers 8 tables
  • 21:00 12 covers 4 tables

The floor

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
table.pophastatesting.tech

An illustration of how this system's front screen is laid out. The live one is a click away.

05Configured for the trade

The same system, set up for very different businesses.

Open any of these and it comes up on its own data. Configuring the platform around a trade is the work we do here in Dubai.

These are demonstration systems, built to show how the platform configures for each trade.

06Technology

It has to fit what you already run.

Nobody replaces everything at once, and nobody should have to. This is what we build with and what we connect to — grouped so you can find your own.

Back end and business rules

Where your actual rules live — what counts as a valid booking, who may approve a discount, what has to happen before an invoice goes out.

  • Python
  • Django
  • gunicorn
  • FastAPI
  • Node.js
  • TypeScript
  • PHP
  • Laravel
  • .NET
  • Java
  • Go
  • REST APIs
  • GraphQL
  • Webhooks

Web and interface

The part your team uses every day, and the part your customers judge you on.

  • HTML
  • CSS
  • JavaScript
  • TypeScript
  • React
  • Next.js
  • Vue
  • Svelte
  • Tailwind
  • WordPress
  • Webflow

Mobile and on site

For the people doing the work away from a desk — engineers, agents, drivers.

  • React Native
  • Flutter
  • Swift
  • Kotlin
  • Installable web apps
  • Offline capture
  • Barcode and QR

Data and storage

Where the records sit, and how quickly you can ask them a real question.

  • PostgreSQL
  • MySQL
  • MariaDB
  • SQL Server
  • SQLite
  • MongoDB
  • Redis
  • Elasticsearch
  • Object storage
  • Reporting and exports

Hosting and delivery

Ours, yours, or your existing cloud account. Where your system runs is your decision, and it stays your decision.

  • Docker
  • Coolify
  • Traefik
  • Nginx
  • Kubernetes
  • AWS
  • Azure
  • Google Cloud
  • Hetzner
  • DigitalOcean
  • Cloudflare
  • On premises

Governed AI

Models that help your team without ever being handed a client’s details.

  • SCRS
  • Claude
  • OpenAI
  • Azure OpenAI
  • Open-weight models
  • Retrieval over your own documents
  • Vector search
  • Redaction layer
  • Policy and audit

What it connects to

A CRM should not become a second place to type what you have already typed once. Most of these are a configuration rather than a project.

  • Xero
  • QuickBooks
  • Zoho
  • Sage
  • Tally
  • Stripe
  • Telr
  • Network International
  • WhatsApp Business
  • Twilio
  • Microsoft 365
  • Google Workspace
  • Google Ads
  • Meta Ads
  • Mailchimp
  • Klaviyo
  • Calendars
  • SMS gateways

Security and access

Who can see what — and being able to show it rather than say it.

  • TLS
  • Single sign-on
  • SAML
  • OAuth 2.0
  • OpenID Connect
  • Two-factor authentication
  • Role-based access
  • Encryption at rest
  • Audit logging
  • Backups and restore drills

If yours is not on the list, ask. The answer is usually yes, and where something would be new to us we say so before the work starts rather than after. What we will not do is take a project on and learn it at your expense.

SCRS is the proprietary, patent-pending technology of Pop Hasta Labs, London.

07What we do

London builds it. We make it yours.

A fair question, answered before you have to ask it.

Software arrives generic. The gap between a capable platform and one your team actually uses is entirely in the configuration — and that gap is where most systems quietly die about four months after they are bought.

Setting it up around your business

Your pipeline stages, your quote and invoice templates, the fields that matter in your trade, who can see what. Done properly this takes conversations, not a wizard.

Moving what you already have

Spreadsheets, an old CRM, a shared inbox, a decade of history in someone's mailbox. Getting it across cleanly is scoped up front rather than appearing on a later invoice.

Support in your time zone

Same working week, same hours, someone who knows how your configuration was built because they built it. Not a queue in another country and a reference number.

One contract

You deal with us. We deal with London. If something is wrong you are not the person having to work out whose fault it is.

08Afterwards

Marketing, once there is something to feed.

Delivered by Sort Marketing, our partner agency, and a separate decision from the platform.

We do not recommend starting here, and it is worth saying why rather than just saying it. Campaigns pointed at a business that cannot follow up quickly are the most expensive way to discover that it cannot follow up quickly.

Demand is easy to create and easy to waste. An enquiry that waits two days for a reply is usually gone, and you will have paid for it either way. Get the system that catches and chases them working first, then turn the tap on.

When you are ready, Sort handles it as their own engagement, with their own team, and you are welcome to take one without the other.

Content and video

Production and user-generated content built for social, rather than a corporate film nobody watches to the end.

Paid campaigns

Advertising aimed at enquiries rather than impressions — measured against what arrived in the CRM, which is the only number that pays wages.

Social management

The ongoing, unglamorous work of showing up consistently, which is most of what actually works.

Success stories

FRS Luma Consultancy has helped multiple businesses build Customized CRMs

We are new in the UAE under this name, and we would rather leave a card marked than fill it with something invented. Cards marked Reserved are held for the first businesses we take live here.

Privé Skin Clinic

Aesthetic clinic · Knightsbridge, London
Client

Personalised, non-surgical aesthetic medicine and wellness care, by appointment: injectables and threads, skin and laser treatments, body, hair and scalp, weight management, lashes and brows. The clinic also runs the Privé Academy, training medical professionals, and an online shop for skincare and wellness.

priveskinclinic.com

Aesthetic clinics

Built by our engineering partner, Pop Hasta Labs, London

The website, which they also manage and secure, and a full end-to-end CRM behind it, including:

  • Inventory management
  • Course management
  • Face and body charting for treatments
Reserved

A client quote will sit here — one or two sentences on what changed once the CRM went in.

Hospitality
Reserved

A client quote will sit here — one or two sentences on what changed once the CRM went in.

Real estate
Reserved

A client quote will sit here — one or two sentences on what changed once the CRM went in.

Garages and auto

09Questions

What people ask before they move their records.

Can we start with just the CRM?

Yes, and most do. It works on its own — the workspace and the rest can follow whenever you want them, or never.

Do we have to move everything at once?

No. We bring the live pipeline across first so nothing in flight is at risk, then the history behind it once people are comfortable.

Can we get our data back out?

Yes. It is your data and you can export it. Anyone who makes that awkward is relying on the cost of leaving rather than on the product being good.

What happens to the tools we already pay for?

Some get replaced and some get connected. Accounts packages and booking tools usually stay and are joined up, so the same figure is not typed twice.

Who can see what?

You decide, per person — and access ends on the day somebody leaves rather than whenever the account is remembered.

We build custom CRMs for your company, with the best security infrastructure and secured, governed AI to increase your productivity.

See it against your own setup.

Tell us which AI tools your team already uses and what a client record looks like today. We will tell you honestly whether this helps.

About half an hour, no deck, and a written recommendation afterwards either way.

Book a call