\n

SECURE PLATFORM ACCESS

Super Admin sign in

Platform / Overview
● DEMONot signed inSA

PLATFORM CONTROL CENTRE

Good morning, Administrator

A clear view of your NEXORA workforce-management platform.

ⓘ
Supabase connection required.Connect your Supabase project, apply the schema, and sign in as an authorized platform administrator to enable live company management.
Registered workspaces ▣
0
+0 this monthAll company records
Active workspaces ✓
0
0% activeOf all workspaces
Company contacts ♙
0
Unique emailsAcross company records
Estimated monthly revenue ↗
KES 0
Plan-based estimateNot collected billing
Pending workspaces ◷
0
Needs reviewAwaiting activation
Suspended workspaces !
0
Access restrictedCheck company status
Industries represented ◇
0
Unique industriesFrom workspace profiles
Countries represented ◎
0
Unique countriesFrom workspace profiles
Platform growth
Workspace registrations
New company workspaces by month · based on recorded creation dates
6 months
New workspacesCumulative workspaces
Subscription mix
Plan distribution
Current registered workspaces by plan

Company workspaces

Manage organizations registered on NEXORA.

COMPANYPLANCONTACTSSTATUSCREATED
▣No companies registered yetRegister your first company to create its workspace.

Platform activity

Recent administrative events.

Workspace health

High-level service status.

CHECKING

Admin interfaceAvailable

Database connectionNot configured

AuthenticationSign-in required

Quick actions

Common platform tasks.

Workspace Access

Activate or suspend membership independently of organization status.

Sign in as platform administrator to load memberships.

COMPANYUSER EMAILROLESTATUSACTIONS
No records loaded.

Registered companies

Each organization will have its own workspace and isolated data.

COMPANYINDUSTRY / COUNTRYPLANCONTACTSSTATUSCREATEDACTIONS

HRM accounts & workspace access

Manage real Supabase Auth accounts, activate HR access, and invite users into active workspaces.

Sign in as a platform administrator to load live accounts.

AUTH ACCOUNTWORKSPACEWORKSPACE ROLEMEMBERSHIPACCOUNT STATUSACTIONS
Account directory loads after secure sign-in.

Suspending an account blocks sign-in. Suspending workspace membership removes access to that company without deleting the account. The service-role key remains server-side.

Starter workspaces
0
Growth workspaces
0
Enterprise workspaces
0

Subscription plans

Illustrative prices only; billing is not connected.

KES 2,500 / month

For small teams getting started.

  • Employee records
  • Leave and attendance
  • Basic reports

Custom

For complex organizations.

  • Configurable modules
  • Advanced permissions
  • Priority support

Company module entitlements

Choose an existing organization, load its saved module settings and apply changes to its HR workspace.

LIVE CONFIGURATION

Select an organization

Settings are loaded from Supabase when an organization is selected.

Sign in as an active platform administrator to load organizations.

Disabled modules are hidden and blocked in HR navigation. Existing records are retained. Changes apply to users when their workspace settings refresh or they reload the dashboard.

Global module catalogue

Define which product capabilities can be enabled for tenant workspaces.

CONTROL PLANE

This catalogue is a planning interface in this release; saving tenant entitlements requires database-backed feature flags.

Platform-wide announcements

Draft an announcement for company administrators.

Not published. Demo only.

Billing provider
Not connectedPayment gateway integration required
Invoices
0No live invoices generated
Failed payments
0Live payment monitoring not configured

Billing operations

Control plan definitions, invoicing and payment status when connected.

No payments are processed by this interface. Plan prices shown elsewhere are illustrative and must be approved before launch.
CAPABILITYSTATUSPRODUCTION REQUIREMENT
Plan catalogue and entitlementsDesign stageDatabase-backed plans and feature limits
Subscriptions and renewalsNot connectedPayment provider webhooks and subscription lifecycle
Invoices and receiptsNot connectedServer-side invoice numbering, PDF generation and tax rules
Failed payment handlingNot connectedRetry policy, grace period and customer notifications
Refunds and reconciliationNot connectedRestricted finance permissions and immutable audit trail

MARKETPLACE OPERATIONS

Jobs marketplace

Review employer submissions, publish approved vacancies and remove listings from public view.

Awaiting review ◷
—Employer submissions
Published ✓
—Visible on the public job board
Rejected ×
—Not publicly visible
Expired ⌁
—Past closing date

Vacancy moderation queue

Live records from Supabase. Only platform administrators can moderate listings.

CONNECTING
Checking platform-admin session…
VACANCYEMPLOYERLOCATIONSUBMITTEDSTATUSMODERATION
Loading vacancies…

Recent moderation activity

Administrative actions recorded in the database.

DATEVACANCY IDACTIONFROM → TOREASON
Loading audit history…

Customer support overview

Support desk shell for future ticket integration.

Open tickets
—Not connected
Urgent
—Not connected
Average response
—Not connected
Ticketing, email ingestion, SLA timers and customer replies need a backend and notification provider.

Support workflow requirements

  • Ticket categories, priority and status lifecycle
  • Assignment, internal notes and customer replies
  • Organization-scoped access and attachments
  • SLA targets, escalation and response-time reporting
  • Audit trail for sensitive account changes

Security posture

Current status of required controls.

Super Admin authenticationMust be implemented before production

Multi-factor authenticationConfigure and enforce

Tenant isolation / RLSSchema starter included; tests required

Session and device controlsNot implemented

Backups and recoveryConfigure in infrastructure

Privileged access policy

  • Use individual named admin accounts; no shared logins
  • Require MFA and least-privilege role assignment
  • Bootstrap the first platform admin through a trusted server-side process
  • Never expose a service-role key in browser JavaScript
  • Log privileged actions server-side and restrict log mutation
  • Test cross-tenant access using independent test accounts
The browser interface is not an authorization boundary. Database policies and trusted server functions must enforce every privileged action.

Audit activity

Administrative events recorded by this demo.

Supabase connection

Enter your project URL and public key.

NOT CONNECTED
Never put a service-role or secret key in browser code.

Super Admin sign-in

Sign in with an account that has been explicitly registered as a NEXORA platform administrator.

Not signed in.

Production checklist

Required before real company data is used.

① Apply database schemaReview the versioned migrations in supabase/migrations/ in order; test them in a development project first.

② Secure Super Admin authenticationEnforce platform admin roles on the server/database.

③ Test tenant isolationVerify RLS using separate company accounts.

④ Connect live workflowsCompany creation and invitations need a trusted backend function.

Review core migration ↗
⌕
Platform destinations
Start typing to find a section.
Choose a result to open it · ↑ ↓ navigate · Enter open