BLOC NGO
Features

The full operating system, in detail.

Thirteen integrated layers — from architecture and authentication to case work, prevention, finance, reports, AI assistance, and governance — all designed around the principle that the Dashboard never stores PII.

Section 01

Platform Architecture

A modern, edge-friendly stack tuned for sensitive-service NGOs.

Deployment model — The real-time dashboard is currently a single-tenanted deployment on Supabase and AWS. It can be made into a multi-tenanted solution, but our recommendation is to deploy it as a single-tenant instance and repeat that model for every partner organisation that wants to deploy it.
  • React / Vite frontend
  • Supabase backend
  • AWS deployment components
  • Single-tenant deployment model
  • Role-based access control
  • Row-Level Security on every table
  • Edge Functions for sensitive bridges
  • Storage with scoped policies
  • Server-side pagination
  • RPC-based dashboard statistics
  • TanStack Query caching
  • Audit logs everywhere
  • No PII in the Metrics Dashboard
Why this matters
  • Stronger data separation between partner organisations
  • Easier partner-specific governance and compliance
  • Lower blast radius if anything goes wrong
  • Better fit for NGOs handling sensitive information
  • Easier adaptation to each partner's workflow
  • Avoids mixing data across unrelated organisations
Architecture diagram placeholder
Section 02

Authentication and Roles

  • Email and password login
  • Two-factor authentication
  • Admin-created accounts only — no self sign-up
  • Roles: Admin, Data Entry, Case Management Officer, Viewer
Why this matters
  • Least-privilege access by default
  • Protects sensitive operational data
  • Supports partner viewer accounts safely
  • Keeps deletion and finance approvals restricted
Section 03

Secure Client Directory Integration

The companion app that holds identity — and nothing else touches it.

  • Separate SWAGAA Client Directory app
  • Separate database, separate auth, separate hosting
  • Google Authenticator-based 2FA
  • Provisioned only to senior staff
  • Metrics Dashboard never stores names, phone numbers, national IDs, or identity artifacts
  • Only shared linkage is the opaque Registry ID
  • Server-to-server access through secure API / Edge Function proxy
  • Browser-to-browser iframe and postMessage for registration or verification
  • No wildcard postMessage origins
  • No structured PII over the bridge
  • Two-identifier minimum for registry searches
  • No PII cached in the Metrics Dashboard
Why this matters
  • Minimises breach impact
  • Supports survivor confidentiality
  • Enables M&E and reports without exposing identities
  • Allows AI and analytics over anonymised data only
  • Helps senior staff retain control over PII access
Registry integration diagram placeholder
Section 04

Dashboard and KPI Overview

  • New cases and closed cases at a glance
  • Referral rate and follow-up rate
  • Trends chart over time
  • Case worker chart
  • Geographic charts
  • Age-band breakdown
  • Fully filterable dashboard
  • Clickable KPI cards that route into filtered case lists
Why this matters
  • Managers move from summary numbers to underlying cases in one click
  • Reduces manual analysis
  • Improves real-time decision-making
  • Makes reporting transparent and inspectable
Dashboard overview screenshot placeholder
Section 05

Cases Module

  • Cases list
  • My Cases
  • Waiting Queue
  • Create Case form
  • Case Detail Sheet
  • Intake tab
  • Care Plan tab
  • Encounters / Revisits
  • Referrals
  • Audit history
  • Filters
  • CSV exports
  • Case status tracking
  • Case worker assignment
  • Risk levels
Why this matters
  • Supports frontline case management
  • Makes ongoing care visible to supervisors
  • Tracks the case lifecycle from intake to closure
  • Improves supervision and accountability
  • Helps identify orphaned or unassigned cases
Case workflow video placeholder
Section 06

Clients Module

  • Local anonymised client records
  • Registry ID linkage
  • Search requiring two identifiers
  • Client Detail Sheet
  • Create Case launch directly from a client
  • ID verification via secure iframe
  • No PII persistence in the Metrics Dashboard
Why this matters
  • Staff work with the right client without exposing identity broadly
  • Prevents duplicate case creation
  • Enables repeat-survivor and re-engagement analysis — safely
Section 07

Prevention Module

  • Prevention dashboard
  • Participant tracking
  • Participant demographics
  • Activity linkage
  • Filters by period, region, sex, age band, HIV status, LGBTQ+ status, disability, and activity
  • Charts by sex, age, region, Inkhundla, disability, HIV status, LGBTQ+ status, activities, and monthly trend
Why this matters
  • Shows who prevention programming is reaching
  • Helps compare outreach with case demand
  • Supports donor reporting and programme targeting
Section 08

Activities, Projects, and KPIs

  • Activities
  • Initiatives
  • KPIs with targets and actuals
  • Tasks
  • Updates
  • Attachments
  • Timeline view
  • Partner organisations
  • KPI reports
  • Reporting period overlaps
  • Multi-initiative KPI linking
Why this matters
  • Links programmes to measurable commitments
  • Helps track donor-funded projects
  • Reduces fragmented project management
  • Supports Crossroads-style partner capacity-building
Section 09

Finance and Receipts

  • Budget line items
  • Initiative allocations
  • Receipt submissions
  • Admin approvals
  • Budget ledger
  • Currency exchange rates
  • Multi-currency normalisation
  • Cost-per-participant and cost-per-case analyses
Why this matters
  • Improves financial accountability
  • Supports donor reporting
  • Links spending to activities and outputs
  • Creates an auditable record of financial decisions
Section 10

Reports Module

  • Stakeholder-facing report builder
  • Templates
  • Chart blocks
  • Dynamic variables
  • Activity or initiative scoping
  • AI-assisted narrative generation
  • Branding standardisation
  • Citations
  • Draft-to-publish lifecycle
Why this matters
  • Reduces manual donor report writing
  • Improves consistency across stakeholders
  • Lets data flow directly into reports
  • Helps small teams produce professional stakeholder outputs
Section 11

Stats Assistant

  • Floating chat widget
  • Real-time date awareness
  • Tool-calling against anonymised database tables
  • Cannot access the Client Directory
  • Answers questions in plain English
  • Streams responses
  • Supports markdown tables
Why this matters
  • Makes analytics accessible to non-technical managers
  • Reduces dependence on SQL or data analysts
  • Supports faster operational questions
  • Keeps PII out of AI workflows
Section 12

Insights the Platform Can Surface

Examples of questions the dashboard can answer in real time.

  • New cases this period
  • Open caseload
  • Cases closed
  • Average days to closure
  • Referral rate
  • Follow-up rate
  • Average revisits
  • Time to first revisit
  • Care plan completion
  • Caseload by officer
  • Workload equity
  • Cases by region and Inkhundla
  • High-risk case concentration
  • Abuse-type prevalence
  • Co-occurrence of abuse types
  • Survivor demographic patterns
  • HIV and health sub-analysis
  • Referral network mapping
  • Outreach-to-intake correlation
  • KPI target vs actual
  • Budget burn-down
  • Cost per participant
  • Cost per case
  • Outreach → Intake → Care Plan → Revisit → Closure funnel
Section 13

Governance and Auditability

  • JSONB diff audit logs
  • performed_by attribution
  • Admin-only deletion
  • CSV export controls
  • Strict role permissions
  • No PII fields in exports or reports
  • Stats Assistant cannot access Registry
  • Cross-origin allow-listing
  • Rate limits for Registry proxy
Why this matters
  • Builds funder confidence
  • Helps investigate anomalies
  • Supports responsible data governance
  • Protects clients and staff
  • Makes digital transformation safer for sensitive NGOs