OEC Verify
A verification platform for application intake and evaluator review. Access is enforced with role-based permissions and Postgres row-level security, and receipts carry encrypted tokens that verify by QR scan.
Overview
A full-stack verification platform covering two sides of the same process: secure application intake, and the evaluator workflow that reviews what comes in. Access is enforced with role-based permissions and Postgres row-level security through Supabase. Receipts carry encrypted tokens, so a receipt can be checked by QR scan.
My role
Independent project — sole developer.
Screenshots
Screen 1 of 1
Lessons learned
- Row-level security
Pushing access rules down into Postgres RLS means the database enforces them, not just the application layer sitting in front of it.
- Encrypted tokens & QR verification
Receipt tokens are encrypted and verify by QR scan, so a receipt can be confirmed as genuine without the scanner needing access to the record behind it.
- Role-based access control
Applicant intake and evaluator review are two different workflows running on one permission model.