The platform
RemoteRegister links every attendance event, identity check, workplace attestation and stipend line to the same learner and the same tamper-evident audit ledger.
Lifecycle
Each stage writes evidence the next stage can rely on. Nothing is re-keyed from a spreadsheet.
Identity, consent, programme and cohort
Device-signed check-ins, offline-safe
Mentor and verifier confirmation
Payable days, NMW floor, pay run
Sealed register, pack and public hash
A single learner record from application to completion. SA ID checksum validation, date-of-birth and citizenship extraction, guardian consent for minors, 18th-birthday re-consent and equity/disability safeguards.
Attendance events carry a UUID, device identity, geofence result, clock-drift flag and mock-location flag. Offline batches use idempotency keys and device cursors so retries cannot duplicate a day.
Host employers, venues and rotations sit alongside the classroom record. Mentors receive a magic link and OTP, review logbooks and attest to workplace evidence without seeing payroll data.
The stipend engine composes payable days from attendance, applies the programme policy and the 2026 NMW learnership floor, and produces a line-level explanation that finance and the learner can both read.
Every export is generated from the same record that produced the attendance and the payment. Each pack carries version metadata and a hash so an auditor can confirm it was not edited after issue.
A control plane for tenant lifecycle, metered billing, break-glass support, residency monitoring, telemetry and audit. Administrative actions are themselves logged in a separate super-admin ledger.
Integration honesty
Adapters are code. Live status is a commercial and certification fact. We publish both so a buyer never discovers the difference during an audit.
| Channel | Build status | Live requirement |
|---|---|---|
| Department of Home Affairs identity | Adapter built | Requires a certified reseller account and credentials before live mode. Simulator mode is labelled in the UI. |
| Bank account verification (AVS-R) | Adapter built | Requires a bureau endpoint and credentials. Duplicate-account checks run against returned outcomes. |
| Payout rails (PayShap / Paystack / Stitch) | Adapter built | Sandbox and live modes are configuration; no live payout is claimed without provider onboarding. |
| SMS & WhatsApp delivery | Adapter built | OTP and notification delivery requires a contracted gateway. In production, OTP routes return 503 until configured. |
| LMS connectors | Adapter built | Roster sync and attendance push against configured LMS endpoints. Connection tests are available in the admin UI. |
| Fingerprint matcher & PAD | Contract defined | ISO/IEC 19794-2 template and ISO/IEC 30107-3 PAD contracts. A certified matcher vendor is required for production matching. |
Separation of duties
Roles are enforced at the API layer, not just hidden in the navigation. Finance cannot approve its own exceptions, and an auditor cannot mutate evidence.
| Code | Role | Primary responsibility |
|---|---|---|
| R1 | Super Administrator | Platform operations, tenant provisioning, break-glass |
| R2 | Tenant Administrator | Provider configuration, users, final approvals |
| R3 | Programme Manager | Programmes, cohorts, tranche milestones |
| R4 | Verifier | Maker-checker attendance and evidence review |
| R5 | Payroll / Finance | Stipend runs, banking files, reconciliations |
| R6 | Trainer / Facilitator | Attendance capture, learner support |
| R7 | Workplace Mentor | Workplace attestation and logbook review |
| R8 | SETA Auditor / Monitor | Read-only evidence and audit-log access |
| R9 | Information Officer | POPIA data-subject requests and incidents |
| R10 | Learner | Self-service attendance, stipend and leave |
| R11 | SDF Consultant | Cross-tenant client context with isolation checks |
Container-ready Node service behind Nginx, with PostgreSQL or an integrity-checked JSON snapshot, optional Redis for shared rate limiting, and object storage for evidence artefacts.
Governed by South African law. Production compute currently runs in Helsinki, Finland (EU), with a documented POPIA section 72 transfer assessment and GDPR safeguards.
Web admin portal, learner self-service, Android edge app with USB fingerprint scanners, and an OAuth-secured REST API with signed webhooks.
A working session, not a slide deck. Bring a real cohort and a real audit question.