diff --git a/netlify.toml b/netlify.toml
new file mode 100644
index 0000000..ce102bf
--- /dev/null
+++ b/netlify.toml
@@ -0,0 +1,27 @@
+# Root netlify.toml - redirects to project-creation-app subdirectory
+# This allows Netlify's native GitHub integration to work with the monorepo
+
+[build]
+  base = "project-creation-app"
+  command = "npm run build"
+  publish = "dist"
+
+# SPA routing - redirect all routes to index.html for client-side routing
+[[redirects]]
+  from = "/*"
+  to = "/index.html"
+  status = 200
+
+# Security headers
+[[headers]]
+  for = "/*"
+  [headers.values]
+    X-Frame-Options = "DENY"
+    X-Content-Type-Options = "nosniff"
+    Referrer-Policy = "strict-origin-when-cross-origin"
+
+# Cache static assets
+[[headers]]
+  for = "/assets/*"
+  [headers.values]
+    Cache-Control = "public, max-age=31536000, immutable"
diff --git a/project-creation-app/ROADMAP.md b/project-creation-app/ROADMAP.md
index e19472c..d76dfd0 100644
--- a/project-creation-app/ROADMAP.md
+++ b/project-creation-app/ROADMAP.md
@@ -53,7 +53,13 @@ Several project types have well-developed Asana templates with additional projec
 3. Any project type without a specific template mapping falls back to `default_template_gid`
 4. Template GIDs are configurable in the TOML config file for semi-technical staff to update
 
+## Autodeploy this app
+- deploy to prod on merge to main [do not implement yet]
+- ~~deploy preview links on PR creation~~ DONE (via Netlify native GitHub integration)
 
+Deploy *only* the project creation helper app, *not* the oauth relay, as the platform oauth endpoints need a stable redirect url.
+
+**How it works:** Netlify's native GitHub integration automatically creates deploy previews for PRs. The root `netlify.toml` configures `base = "project-creation-app"` for monorepo support. Environment variables are configured in Netlify site settings (sync with `npm run env:sync:execute`).  
 
 ## Add Auth0 Authentication