Document management, audit and supply-chain traceability for a palm-oil sustainability consultancy.
Public landing page: 3-slide hero with BM/EN toggle
1 / 30What it does
Clients upload compliance records against scheduled requirements, admins track deadlines and certificate expiry, and auditors build reports from a view-only evidence viewer. Four roles, granular permissions, BM/EN throughout.
Superadmin, Admin (with per-feature permissions), Client and Auditor each get their own dashboard. Permissions are enforced at the route level, so every page and form is covered.
A requirement's cycle starts from the client's first upload and chains forward weekly, monthly or yearly. Missed periods are flagged and can only be reopened by an admin.
Colour bands (green > 90 days, amber 30–90, red < 30, expired) on the admin dashboard; urgency chips on every client task card.
Drag-and-drop with instant type/size validation. Files are checked by content and extension, stored on disk per client, with only the path kept in the database.
Auditors open a client’s documents inside the portal only. The browser’s download and print controls are hidden, printing produces a blank page and right-click is disabled. Nothing leaves the system.
Mills and dealers upload their supplier lists from an Excel template; the portal matches entities, builds the full refinery → mill → estate chain, flags gaps and duplicates, and exports it.
Admin assigns an auditor → auditor requests access → client approves → 48-hour audit window opens. Every step is visible on the auditor's dashboard.
Clients raise help requests (rate-limited); admins respond, close and broadcast announcements to all clients.
Paired login/logout sessions with duration, document and system activity for 30 days. Session timeout with warning modal, suspicious-login alerts, bcrypt passwords.
Every page has a BM/EN toggle; the client interface defaults to BM for local estate and mill operators.
Full feature list
Grouped by module, so you can see how much a project like this actually covers.
Try the features
Each demo is a small, self-contained copy of one real feature from this project. Nothing is saved and nothing leaves your browser.
Required documents with deadline urgency chips. Upload one and watch the progress update.
Try it: submit required documents
SOP: Occupational Safety & Health
SubmittedEnvironmental impact assessment
6d leftWorker training records (Q3)
19d leftChemical usage register
3d overdueWeekly to yearly or permanent, with an anchor date. Cycle chips show done, current, missed and upcoming.
Try it: document schedules
Cycles this year: click a chip to simulate an upload
green = uploaded · amber = current period · red = missed (admin must reopen) · grey = upcoming
PDF and images only, 6 MB stored, oversized files compressed. Everything else is rejected on the spot.
Try it: upload rules
Click a file to “drop” it into the zone
Drag & drop files here: PDF, PNG, JPG · max 6 MB (up to 25 MB compressed)
Admin rejects with a reason; the client sees it, re-uploads, and the old file is replaced.
Try it: reject & resubmit
Admin: task table
Chemical usage register
chemical-register-v1.pdf
Client: documents
Four roles, and per-feature permissions for admins set by the superadmin.
Try it: switch roles and permissions
Sidebar for Admin
Permissions (set by superadmin)
Five wrong passwords → 60-second lock, show/hide password, Caps Lock warning, every attempt logged.
Try it: login protection
Public /daftar form feeds a queue; superadmin approval creates the account and assigns category templates.
Try it: public self-registration → approval
Superadmin: Registrations
Green, amber, red and expired: the same bands the admin dashboard uses.
Try it: certificate expiry bands
Nested templates where every node is a document; assigning a main file includes its active sub-files.
Try it: document template tree
0 requirements assigned to Ladang Jaya Estate · assigning a main file includes every active sub-file
Click, Ctrl+click, Shift+click to select; right-click to move, reject or delete.
Try it: explorer-style file grid
Admin assigns, auditor requests, client approves, and a 48-hour report window opens.
Try it: auditor access workflow
Auditors read documents inside the portal only. Download, print and right-click are blocked.
Try it: view-only evidence viewer
SOP 04: Occupational Safety & Health
Rev 3 · Ladang Jaya Estate · page 1 of 6
Letterhead from the client record, one row per clause, evidence chosen from the client's uploads.
Try it: internal audit report
Internal audit report · MSPO
letterhead pulled live from the client record
| Clause | Evidence | |
|---|---|---|
| 4.1.1 Policy on sustainability | ||
| 4.1.2 Internal audit | ||
| 4.2.1 Transparency of documents | ||
| 4.3.1 Legal compliance |
1 of 4 clauses saved · evidence list = this client's uploads only
Refinery → mill → estate tree with search and a gaps-only toggle for entities with no supplier list.
Try it: supply-chain traceability
Rules: refinery → mill · mill → estate / dealer / smallholder · dealer → dealer / smallholder
MPOB no. → SSM no. → name + state similarity → new entity. Exactly how uploaded rows are matched.
Try it: supplier entity matching
Matched by name + state
→ Ladang Jaya Sdn Bhd · Kedah · E-2210
Clients raise up to 3 requests an hour; admins filter, respond, close and delete closed ones.
Try it: help desk
Admin: Compress it or use the built-in Compress & Upload button.
Admin publishes once; every client dashboard shows it.
Try it: announcements
Client dashboard: Pengumuman1
Audit season starts 1 Oct: please complete all September uploads.
12 Sep
Every page has a BM/EN switch. Clients default to BM.
Try it: BM / EN toggle
Peringatan
Tugasan "MSPO" perlu dimuat naik dalam 1 hari.
Kemajuan keseluruhan
1 / 3 dokumen selesai dihantar
Menunggu 2 · Ditolak 0
Your turn
Tell me what you run and what slows you down. I'll reply on WhatsApp within a day with what I'd build and what it would cost.