PLATFORM CONTROL CENTRE
Good morning, Administrator
A clear view of your NEXORA workforce-management platform.
Company workspaces
Manage organizations registered on NEXORA.
| COMPANY | PLAN | CONTACTS | STATUS | CREATED |
|---|
Platform activity
Recent administrative events.
Workspace health
High-level service status.
Admin interfaceAvailable
Database connectionNot configured
AuthenticationSign-in required
Quick actions
Common platform tasks.
Workspace Access
Activate or suspend membership independently of organization status.
Sign in as platform administrator to load memberships.
| COMPANY | USER EMAIL | ROLE | STATUS | ACTIONS |
|---|---|---|---|---|
| No records loaded. | ||||
Registered companies
Each organization will have its own workspace and isolated data.
| COMPANY | INDUSTRY / COUNTRY | PLAN | CONTACTS | STATUS | CREATED | ACTIONS |
|---|
HRM accounts & workspace access
Manage real Supabase Auth accounts, activate HR access, and invite users into active workspaces.
Sign in as a platform administrator to load live accounts.
| AUTH ACCOUNT | WORKSPACE | WORKSPACE ROLE | MEMBERSHIP | ACCOUNT STATUS | ACTIONS |
|---|---|---|---|---|---|
| Account directory loads after secure sign-in. | |||||
Suspending an account blocks sign-in. Suspending workspace membership removes access to that company without deleting the account. The service-role key remains server-side.
Subscription plans
Illustrative prices only; billing is not connected.
KES 2,500 / month
For small teams getting started.
- Employee records
- Leave and attendance
- Basic reports
KES 7,500 / month
For growing organizations.
- Core HR and recruitment
- Advanced reports
- Performance tools
Custom
For complex organizations.
- Configurable modules
- Advanced permissions
- Priority support
Company module entitlements
Choose an existing organization, load its saved module settings and apply changes to its HR workspace.
Select an organization
Settings are loaded from Supabase when an organization is selected.
Sign in as an active platform administrator to load organizations.
Disabled modules are hidden and blocked in HR navigation. Existing records are retained. Changes apply to users when their workspace settings refresh or they reload the dashboard.
Global module catalogue
Define which product capabilities can be enabled for tenant workspaces.
This catalogue is a planning interface in this release; saving tenant entitlements requires database-backed feature flags.
Platform-wide announcements
Draft an announcement for company administrators.
Billing operations
Control plan definitions, invoicing and payment status when connected.
| CAPABILITY | STATUS | PRODUCTION REQUIREMENT |
|---|---|---|
| Plan catalogue and entitlements | Design stage | Database-backed plans and feature limits |
| Subscriptions and renewals | Not connected | Payment provider webhooks and subscription lifecycle |
| Invoices and receipts | Not connected | Server-side invoice numbering, PDF generation and tax rules |
| Failed payment handling | Not connected | Retry policy, grace period and customer notifications |
| Refunds and reconciliation | Not connected | Restricted finance permissions and immutable audit trail |
MARKETPLACE OPERATIONS
Jobs marketplace
Review employer submissions, publish approved vacancies and remove listings from public view.
Vacancy moderation queue
Live records from Supabase. Only platform administrators can moderate listings.
| VACANCY | EMPLOYER | LOCATION | SUBMITTED | STATUS | MODERATION |
|---|---|---|---|---|---|
| Loading vacancies… | |||||
Recent moderation activity
Administrative actions recorded in the database.
| DATE | VACANCY ID | ACTION | FROM → TO | REASON |
|---|---|---|---|---|
| Loading audit history… | ||||
Customer support overview
Support desk shell for future ticket integration.
Support workflow requirements
- Ticket categories, priority and status lifecycle
- Assignment, internal notes and customer replies
- Organization-scoped access and attachments
- SLA targets, escalation and response-time reporting
- Audit trail for sensitive account changes
Security posture
Current status of required controls.
Super Admin authenticationMust be implemented before production
Multi-factor authenticationConfigure and enforce
Tenant isolation / RLSSchema starter included; tests required
Session and device controlsNot implemented
Backups and recoveryConfigure in infrastructure
Privileged access policy
- Use individual named admin accounts; no shared logins
- Require MFA and least-privilege role assignment
- Bootstrap the first platform admin through a trusted server-side process
- Never expose a service-role key in browser JavaScript
- Log privileged actions server-side and restrict log mutation
- Test cross-tenant access using independent test accounts
Audit activity
Administrative events recorded by this demo.
Supabase connection
Enter your project URL and public key.
Super Admin sign-in
Sign in with an account that has been explicitly registered as a NEXORA platform administrator.
Production checklist
Required before real company data is used.
① Apply database schemaReview the versioned migrations in supabase/migrations/ in order; test them in a development project first.
② Secure Super Admin authenticationEnforce platform admin roles on the server/database.
③ Test tenant isolationVerify RLS using separate company accounts.
④ Connect live workflowsCompany creation and invitations need a trusted backend function.