Education compliance trust-management platform

Problem

The client needed a live MVP that shows education organisations and their suppliers which regulations apply to them and where their evidence falls short, replacing a no-code prototype.

Solution

After an MVP review, a day-wise estimate and an SRS, the team designed a Figma design system and built a Next.js frontend with a Node.js, TypeScript, Sequelize and PostgreSQL backend. The build covered JWT auth with email verification, resumable onboarding for four organisation roles, admin management of trust items, tags and categories with S3 pre-signed uploads, role profiles with requirements and missing-items views, public vendor profiles, evidence uploads, activity logging, compliance statistics and an OpenAI service that summarises uploaded compliance documents. It runs on AWS with GitHub Actions, Vercel and Cloudflare DNS. When scope and cost friction arose mid-project, the team set a written scope baseline, discounted the design rate and moved to wireframe-first reviews.

Key features

• Admin curation of trust items, tags and categories
• Onboarding for district, state department, supplier and governing body roles
• Role profiles with requirements, linked items and missing-items views
• Public and private evidence uploads with email notifications
• AI summaries and key points from uploaded PDF and Word compliance documents
• Compliance percentage statistics and activity feed
• Public shareable vendor profiles and product listings
• Bookmarks, search, filtering and pagination
• JWT auth in HttpOnly cookies with email verification and password reset

Tech stack

• AWS S3
• AWS VPC
• Cloudflare
• Docker
• Figma
• GitHub Actions
• HttpOnly cookies
• JWT
• Next.js
• Node.js
• Nodemailer
• OpenAI API
• PostgreSQL
• React
• React Hook Form
• Sequelize
• SonarQube
• TypeScript
• Vercel
• Zod