MazingiraOps
Multi-ward environment operations platform
A multi-tenant operational platform engineered to digitize municipal sanitation and environmental management from Makina Ward to Kibra Subcounty and Nairobi City County. Features QR attendance, leave approval workflows, field work evidence, and immutable reporting.
Manual Records & Evidence Gaps
Municipal environmental operations across informal settlements previously depended on physical paper rosters. Sign-in sheets were prone to ghost worker entries, daily attendance lacked timestamp or GPS integrity, and work descriptions were lost in ad-hoc messaging apps.
Sick-offs and leave requests had no centralized approval state machine, causing administrative delays, while quarterly county performance appraisals required days of manual reconciliation.
End-to-End Verified Workflow Platform
MazingiraOps digitizes the entire administrative lifecycle: bulk roster imports with 11-digit year-prefixed IDs, daily expiring QR sessions with anti-duplicate validation, and verified work logs with multi-photo evidence (Before, During, After).
Supervisors review and approve submissions through structured state transitions, feeding an automated reporting engine that outputs deterministic, immutable PDF and CSV reports.
From field roster ingestion to immutable municipal appraisal archives
Staff & Roster Ingestion
Imports and validates 11-digit year-prefixed Employee IDs via Excel/CSV rosters, updating records without deleting historical data.
Security, Tenant Isolation & Privacy Invariants
Default-Deny Scoping
Roles include System Admin, Ward Officer, Subcounty Reviewer, HR Viewer, and Read-Only. Default-deny tenant isolation is enforced at database queries and service boundaries.
S3 & Scoped Evidence
Field photos, sick sheets, and medical certificates are stored in private S3 buckets and streamed exclusively via authorized signed routes. Medical files are restricted to HR viewers.
Appraisal Snapshots
Finalized reports are frozen as immutable snapshots unaffected by subsequent record edits. Spreadsheets are sanitized against CSV formula injection vulnerabilities.