Back to catalog
Corteza
Apache-2.0Corteza is an open-source low-code CRM and application platform offering self-hosted record management, visual BPMN workflows, and an API-first engine.
Overview
Corteza is an open-source low-code application platform and CRM built with a Go backend and a Vue.js web client. Unlike conventional sales trackers that enforce fixed database schemas, it combines modular record storage with an API-first engine and visual BPMN workflows. Teams use it to run custom customer pipelines alongside internal operational tools on their own infrastructure.
Where Corteza fits
Teams seeking CRM software typically weigh commercial suites like Salesforce or HubSpot against internal tool builders like Retool. Turnkey sales suites provide standard pipeline tracking, but integrating them with private databases or custom endpoints often requires tier upgrades, proprietary connectors, or third-party iPaaS subscriptions. Conversely, raw internal tool builders allow direct SQL queries but lack native CRM semantics, opportunity lifecycles, and record-level permissions. Corteza bridges this gap by embedding a configurable CRM namespace directly into a self-hosted low-code engine.
From an integration perspective, Corteza serves as a datastore and an automation hub. Its Integration Gateway and sink routes ingest cryptographically signed webhooks from external services without middleware. The platform pairs standard BPMN 2.0 visual workflows with an isolated Corredor container for custom server-side JavaScript transforms. The operational trade-off is setup overhead: connecting third-party services requires operations leads to map endpoints, configure headers, and secure signatures manually instead of activating one-click marketplace plugins.
What it does well
- Signed sink route endpoints: Ingests external webhooks and email payloads through signed HTTP endpoints without custom proxy scripts or public database exposure.
- Visual BPMN workflows: Lets operations leads automate multi-step pipelines, scheduled tasks, and external HTTP requests using standard BPMN 2.0 flowcharts.
- Dedicated Corredor automation runner: Executes complex server-side JavaScript in an isolated container, keeping custom data transforms from blocking the Go server.
- Multi-tenant namespaces: Allows agencies to host isolated CRM instances, client workspaces, and internal tools within a single deployment.
- Granular access control: Enforces flattened role-based permissions down to individual fields, protecting sensitive records across user roles.
