TRUST LAYER • DOCUMENT CONTROL & ACCESS

Sensitive records protected by role, purpose, and case state.

Verify the data classification guidelines, role-based access permissions (RBAC), private storage protocols, and security audit systems backing the platform.

Security Sandbox

Security & Compliance Workspace

Interact with the role matrix to inspect active resource parameters, review storage policies, and test audit checks.

Compliance Security Lab

Role Access & Document Controls

RBAC Enforced
Interactive Role-Based Access MatrixSelect a role to inspect resource-level permissions.
Resource Permissions Matrix
Public approved profileView
Private profile documents (Visa, contract)Blocked
Customer identity detailsManage
Booking case ticketView
Invoice & Receipt logsView
ID-card closure fileBlocked
Operational Audit LogsBlocked
Private Storage Rules

Helper document scans and municipal licenses reside inside private buckets. Temporary URLs expire in **60 seconds**, ensuring files are never exposed in public folder registers.

Agency Review Auditapproved

"Agency AG-021 provided excellent offline coordination and quick meeting times."

Important: Review forms allow rating the agency coordination process only. Helper profile ratings or personal performance reports are locked out to prevent worker exploitation.

Authorization Rules

Strict Role-Based Access Control (RBAC) Matrices

Access permissions are restricted based on user roles: Customer, Agency User, and Admin. Customers browse approved public listings but cannot query private agency files or legal details. Agency users manage their own candidates but have no visibility into competitors' cases. Operators supervise and moderate profiles based on verified municipal license credentials.

Access ResourceActive Role Permissions
Customer ID:Admin View / Agency Blocked
Roster CV / Passports:Agency Manage / Customer Blocked
Audit trail logs:Admin Only (Immutable)
Information Security

Data Classifications & Information Isolations

To guarantee privacy, the platform classifies records into public-facing directories and encrypted operational logs:

Masked

Public approved Profiles

Masked helper profiles containing age, experience, and skills with no worker identity descriptors.

Encrypted

Private Upload Folders

Agency CR licenses, municipal permits, and Omani ID Card documents stored securely.

Audited

Transaction Audit logs

Immutable event streams tracking who accessed, verified, or locked registry resources.

Private Object Storage SpecsSecure Link
No public document URLs; assets are fully isolated.
Temporary links expire automatically in 60s.
All downloads require authorized session tokens.
Storage Policies

Private Storage Bucket & Link Expiring Policies

All uploaded municipal licenses and ID Cards reside inside secure object storage buckets. Document retrieval queries generate temporary, short-lived links that expire within 60 seconds. This avoids indexing, scraping, or direct link sharing, keeping file access limited to active sessions.

Oman Data Residency & Backup recovery Guidelines

In accordance with local guidelines, hosting preference is given to Oman-local data centers. All data transports are encrypted (SSL/TLS 1.3), and daily database backup dumps are tested in staging environments, ensuring recovery readiness against infrastructure failures.

Have a complex workflow that needs a custom platform?

We can map your operations, design the software architecture, and build the dashboards, apps, and automation layers needed to run it.