Website & beneficiary experience4

• REQ-001Website pagesContent management and the association's pages, memberships and services in Arabic and English.Fully shown4 screens
  Fully shown
• REQ-002Membership categories displayDisplay the five categories with their benefits, requirements and fees once the association approves the names and policies.Fully shown5 screens
  Fully shown
• REQ-003Register interestA standalone form to register interest in services, with contact consent, convertible into an application when the beneficiary wishes.Fully shown2 screens
  Fully shown
• REQ-004UsabilityMobile-responsive interfaces, clear fields and understandable error messages, and testing the journey with users.Partly shown4 screens
  Partly shown

Account & memberships8

• REQ-005Account creationAccount sign-up, contact verification, password recovery and prevention of duplicate accounts (Nafath).Partly shown5 screens
  Partly shown
• REQ-006Membership applicationA unified form with category selection and conditional fields per its requirements, saving the application to complete later.Fully shown3 screens
  Fully shown
• REQ-007DocumentsUpload required attachments, validate file type and size, and alert the applicant to what is missing.Fully shown4 screens
  Fully shown
• REQ-008Application reviewRoute the application to the officer, reviewer and approver, with correction requests, acceptance or reasoned rejection, and a decision log.Fully shown4 screens
  Fully shown
• REQ-009Status trackingShow the applicant the status and next step, with the history of actions and notifications.Fully shown4 screens
  Fully shown
• REQ-010Membership cardIssue a digital card with membership number, expiry date and verification code once activation conditions are met.Fully shown4 screens
  Fully shown
• REQ-011RenewalOnline renewal and reminders before expiry, and managing suspension and cancellation per approved policies.Fully shown5 screens
  Fully shown
• REQ-012Member dashboardA unified profile linking membership, requests, payments, certificates, professional hours and events.Fully shown5 screens
  Fully shown

Payments & invoices3

• REQ-013Online paymentIntegration with a payment gateway approved by the association, updating status after a trusted payment notification.Partly shown4 screens
  Partly shown
• REQ-014Receipts & invoicesIssue the appropriate financial document, make it available to the member and link it to the transaction, without assuming tax liability.Fully shown3 screens
  Fully shown
• REQ-015Reconciliation & refundsTrack transactions, financial reconciliation and refunds approved by the authorised person, with an audit trail.Fully shown3 screens
  Fully shown

Professional development (CPD)4

• REQ-016Internal activitiesLink attendance at courses and events to qualifying hours per the association's policy, preventing double counting.Partly shown4 screens
  Partly shown
• REQ-017External activitiesSubmit an external activity with date, provider, hours and proof of attendance for review.Fully shown2 screens
  Fully shown
• REQ-018Hours approvalReview the activity and approve, adjust or reject the hours with a clear reason, recording the reviewer.Fully shown3 screens
  Fully shown
• REQ-019CPD recordHours balance, credit period, progress toward the association's requirements, and export.Fully shown3 screens
  Fully shown

Credentials & certificates3

• REQ-020Credential applicationSeparate credential applications linked to the member's file, with configurable conditions, evidence and review paths.Fully shown4 screens
  Fully shown
• REQ-021Certificate issuanceCertificates with a unique number and verification code, with validity date and issued or revoked status.Fully shown3 screens
  Fully shown
• REQ-022Credential renewalManage renewal and tie it to the requirements and approved hours per the approved policy.Fully shown3 screens
  Fully shown

Training & events2

• REQ-023Registration & bookingA schedule of courses and events with seats, eligibility, fees, confirmation and cancellation.Fully shown4 screens
  Fully shown
• REQ-024Attendance & evaluationRecord attendance, send an evaluation, issue a certificate and link the activity to the member's file.Fully shown4 screens
  Fully shown

Notifications & beneficiary service3

• REQ-025Communication channelsEmail, SMS and WhatsApp through providers approved by the association and accounts it owns.Partly shown4 screens
  Partly shown
• REQ-026Notification templatesCorrection, decision, payment and renewal notifications with a send and delivery log and consent management.Fully shown5 screens
  Fully shown
• REQ-027Support requestsLog an enquiry or complaint, classify, assign and track it, and measure response and closure time.Fully shown5 screens
  Fully shown

Staff management & reports4

• REQ-028Staff dashboardA unified request list with search and filtering by category, status and owner, opening the request detail.Fully shown3 screens
  Fully shown
• REQ-029Roles & permissionsRoles for member, staff, reviewer, approver, finance and system admin with least necessary privilege.Fully shown4 screens
  Fully shown
• REQ-030Management dashboardsReports on requests, renewals, revenue, hours, credentials and processing time, with Excel export.Fully shown4 screens
  Fully shown
• REQ-031Audit logRecord sign-ins, edits, approvals and transactions with user and time, protecting the log.Fully shown3 screens
  Fully shown

Technology & delivery7

• REQ-032IntegrationsDocumented APIs for payments, notifications and agreed integrations, clarifying third-party costs.Infrastructure3 screens
  Infrastructure
• REQ-033Security & privacyEncrypt connections and sensitive data, protect attachments, manage sessions and add extra authentication for admins.Partly shown4 screens
  Partly shown
• REQ-034Hosting & backupSpecify the hosting location, the backup and restore plan and its testing, and service levels within the offer.Infrastructure2 screens
  Infrastructure
• REQ-035Data migrationAnalyse, clean and migrate the available data after the sample is approved, reconciling record counts.Partly shown2 screens
  Partly shown
• REQ-036Testing & acceptanceProvide test scenarios covering permissions, duplicate payment, corrections, renewal and hours approval.Service & delivery4 screens
  Service & delivery
• REQ-037Training & documentationStaff training and handover of guides, documentation, admin accounts and agreed usage rights.Service & delivery5 screens
  Service & delivery
• REQ-038Support & maintenanceA warranty, support and maintenance offer with fault classification, response and resolution times, and an escalation mechanism.Service & delivery4 screens
  Service & delivery

Goals & beneficiaries2

• RFP-01Project objectivesA connected digital experience from discovering services to managing membership, CPD, credentials and renewal: simpler applications with visible status and next step, less duplicate entry through one profile, automated review/approvals/notifications/renewal, policy-based hours and credentials, and data and reports for management.Fully shown4 screens
  Fully shown
• RFP-02Beneficiaries & stakeholdersBeneficiaries: applicants and members, association teams, reviewers and approvers. The spec adds visitors, finance, system administrators, and management/supervisors who follow KPIs, workload, request ageing and SLAs.Fully shown4 screens
  Fully shown

Governance & delivery8

• RFP-03Final deliverablesApproved requirements, journey design and testable UI prototypes; website, member portal, staff and admin dashboards; payment and notification integrations, financial records and operational reports; test and UAT results with a closed defect log; guides, training, admin accounts, an operations plan, support and backup/restore. The offer and spec add the iOS/Android member app.Partly shown5 screens
  Partly shown
• RFP-08Communication & launch announcementPrepare membership pages, FAQs and invitation messages before the pilot, invite the chosen group, then plan the public announcement after a successful pilot and service/support readiness.Fully shown4 screens
  Fully shown
• RFP-12Solution demo of the journeysA demo showing the applicant, staff, payment, renewal, hours and credential journeys according to solution readiness.Fully shown6 screens
  Fully shown
• RFP-14Solution evaluation criteriaThe solution is scored on requirement coverage, ease of the beneficiary journey, vendor experience, schedule realism, integrations and security, support and delivery, and total cost.Service & delivery2 screens
  Service & delivery
• RFP-15REQ-code traceability & change controlRequirement codes are used to trace response, testing and change. The spec adds a requirements register keyed by REQ codes, with any out-of-scope change going through a change request showing its time and cost impact.Service & delivery0 screens
  Service & delivery
• OFR-19Project governanceWeekly meetings, progress reports, minutes and documented sign-offs per phase with an issues log until closure; a weekly risk register and an escalation path from the project manager to both parties' senior management.Service & delivery0 screens
  Service & delivery
• OFR-20Delivery team & rolesProject manager, business analyst, UX/UI designer who tests with users, developers, integration engineer, QA engineer, operations & security engineer, and training & support lead; CVs on request.Service & delivery0 screens
  Service & delivery
• SPC-18Open ideas log for continuous improvementEach new idea follows: clear problem → affected user → scenario → proposed change → measurable value → security/operational impact → estimate → priority decision (Must/Should/Could/Later) with a success metric.Service & delivery2 screens
  Service & delivery

Scope & phases6

• RFP-04The three journeys: membership, member services, staffThe membership journey from visiting the site to activation and the digital card; member services (requests, payments, renewal, courses, CPD, credentials, certificates); and the staff journey from a unified inbox to an authorised decision with audit log and reports on volume, age and processing time.Fully shown4 screens
  Fully shown
• RFP-06Scope boundaries & exclusionsCommittees, board, meetings and volunteering are priced separately. No donations platform or full ERP unless added. Payment-gateway, notification and third-party licence fees are shown separately, and anything out of scope goes through a written change order.Service & delivery1 screens
  Service & delivery
• RFP-07Two phases, pilot launch and timelineApprove the pilot scope and decide what moves to the expansion phase; pilot target end of October 2026 for a limited group, then review and complete CPD, credentials, training and events before general launch. The plan is an initial target, not a commitment for all modules.Partly shown1 screens
  Partly shown
• OFR-01All 38 requirements within the platform priceAll 38 requirements are covered: 15 available, 13 by configuration, 10 by development including expansion modules and Nafath. The platform starts from our existing membership, payment, notification and ticketing modules, and all configuration/development is in the price.Service & delivery0 screens
  Service & delivery
• SPC-14Optional future additionsGuided assistant, membership recommendation, personal document vault, Apple/Google Wallet card, unified calendar, smart waitlist, short contextual surveys, announcements center, external calendar, internal e-signature/acknowledgement, partner webhooks/API, and professional portfolio export.Partly shown5 screens
  Partly shown
• SPC-16Must / Should / Could prioritiesMust for pilot: account, unified profile, membership, draft, correction, review, payment, card, renewal, notifications, support, permissions, audit, mobile-friendly. Should before/with general launch: task center, document library, saved filters, accessibility, notification preferences, CPD, credentials, training, app. Could later: Wallet, course recommendations, guided assistant, external calendar.Partly shown1 screens
  Partly shown

Configuration & policies7

• RFP-05Payment timing set by policyThe applicant pays 'at the point the policy decides', and membership activates once all conditions are met. The spec lists 'the exact payment point in the journey' as an open decision.Partly shown2 screens
  Partly shown
• RFP-09Dependencies & inputs from the associationApprove category names, fees, eligibility and documents; renewal, credential and CPD policies; authority holders; access to the current site and data; payment and notification providers; the Nafath account; Coursera/Udemy subscriptions; and timely operational decisions.Partly shown5 screens
  Partly shown
• OFR-06The five membership categoriesStudent (ST), Graduate within 3 years (GR), Mining Practitioner (MP), Geology Practitioner (GP), Professional Fellow. Number, names, fees, eligibility and documents are configured from admin.Fully shown3 screens
  Fully shown
• OFR-08Configurable request states & transitionsDraft → Submitted → Under review → Awaiting correction → Awaiting approval → Awaiting payment → Active; closing states: Rejected with reason, Cancelled, Expired, Suspended. States, transitions and the owner of each are configured from admin.Fully shown3 screens
  Fully shown
• OFR-09No-code configuration from adminCategories and names, fees and duration, eligibility, documents per category, conditional fields, review stages and owners, payment timing, reminder and grace periods, notification templates and the card template.Fully shown5 screens
  Fully shown
• OFR-10Tax treatment & document type per serviceApply tax treatment per the association's financial policy with no prior assumption; open decision: confirm tax policy and financial document type (receipt or invoice) per service.Partly shown2 screens
  Partly shown
• SPC-19Open decisions before implementationApprove category names, number, fees, eligibility and documents; payment timing; renewal, grace, suspension and cancellation policies; CPD rules; credential types and paths; payment, SMS and WhatsApp providers; KPIs and targets; code ownership; tax policy and document type; migration data scope.Partly shown4 screens
  Partly shown

Measurement & acceptance4

• RFP-10The six acceptance criteria(1) A full scenario from sign-up to activation, card and renewal; (2) correction, reasoned rejection and review/approval separation; (3) payment success, failure, refund and idempotent payment notifications; (4) no unauthorised access to member data, attachments or decisions; (5) duplicate-free hour credit and certificate issuance (expansion); (6) backup/restore test, guides and accounts handed over, critical defects closed.Partly shown6 screens
  Partly shown
• RFP-11The six KPIsApplication completion rate, share returned for correction, average decision time, renewal rate, beneficiary satisfaction with registration, and support response time. The association sets each definition, source and target after a baseline.Partly shown4 screens
  Partly shown
• SPC-13Experience analyticsSign-up funnel, application funnel, correction reasons, rejection reasons, payment failures by provider/method, renewal (eligible/started/completed), CPD, training (view → register → attend → evaluate → CPD) and support.Fully shown2 screens
  Fully shown
• SPC-17UX acceptance criteriaTwelve criteria including: return to the original page after verification; see documents and fees before submitting; no incomplete submissions; land directly on gaps when correcting; clear payment result with no double charge; status, next step and last update shown; journeys usable on mobile without horizontal scroll; keyboard-operable; nothing beyond permissions even in search/export; filters kept on return; graceful loading, empty, error, session-expiry and conflict states.Partly shown3 screens
  Partly shown

Data & ownership2

• RFP-13Data ownership & exportClarify data ownership, export capability and usage/code rights according to the solution and contract model.Partly shown3 screens
  Partly shown
• OFR-21Usage model: annual subscription & code rightsAn annual subscription giving the association the right to use the platform and app for all its users with no user cap, including hosting, support, maintenance, updates and later improvements. The spec notes that source-code transfer is not stated and must be addressed in the contract if required.Service & delivery0 screens
  Service & delivery

Channels & interfaces3

• OFR-02The six platform channelsBilingual public website; beneficiary/member portal; iOS and Android member app; staff, reviewer, approver and finance workspace; admin, reports and settings; and public QR verification pages for cards and certificates.Fully shown6 screens
  Fully shown
• OFR-03Association-branded, bilingual interfacesAll interfaces follow the Mining Association's identity, in Arabic and English, designed per role and finalised in the design phase, with instant language switching on every page.Fully shown3 screens
  Fully shown
• SPC-02Proposed page mapA full map of public, account, member, staff/finance and admin/settings pages so no important function lacks a clear entry point; some are tagged 'improvement proposal', such as the task center, devices, form and workflow designers and system monitoring.Fully shown5 screens
  Fully shown

User experience13

• OFR-04Home page: two calls to action & community statsA welcome hero with two buttons — 'Join now' for the decided, 'Find the right membership' for those comparing; a card per category; a comparison table; benefits and community-size indicators; register interest; member sign-in and language switch.Fully shown3 screens
  Fully shown
• OFR-05Sign-up in three short stepsThree steps — basic data, verification, completion — with a progress indicator; password-strength rules visible while typing with a show button; duplicates are redirected to sign-in or recovery.Fully shown2 screens
  Fully shown
• OFR-07Staff dashboard: quick actions & work indicatorsIndicators: new, in review, awaiting correction, overdue, approved this month — each opens its requests. Quick actions: start a request on behalf of a beneficiary, find a member, send a notification, export to Excel. KPIs: average processing time, completion, returned for correction, satisfaction and distribution by category.Fully shown3 screens
  Fully shown
• SPC-01The ten UX principlesNext step always clear; minimum input; task before browsing; continuity; prevent errors; transparency; real bilingual experience (RTL/LTR, number/date/currency formats); accessibility; security without friction; extensible design.Fully shown3 screens
  Fully shown
• SPC-03UX specs and metrics for the nine core journeysDetails per journey (account, application, correction, payment, renewal, CPD, credential, training, support) — e.g. correction opens on the gaps, tax shown before payment, renewal readiness with a CTA per blocker, help articles suggested before a ticket — each with metrics.Fully shown5 screens
  Fully shown
• SPC-04A unified design systemComponents with fixed usage rules: header, role-based side navigation, status badge, stepper/timeline, task card, document card, data table, empty and error states, confirmation dialog, toast, form field, autocomplete, file uploader, money summary and audit summary.Fully shown3 screens
  Fully shown
• SPC-05Form standards & effort reductionAutosave with last-saved time; logical steps; conditional fields only when needed; reference lists and autocomplete; examples beside sensitive fields; no re-upload of still-valid documents; document-expiry alerts; inline positive validation; focus first error with a summary on top; back without losing data; upload progress and retry.Fully shown3 screens
  Fully shown
• SPC-06Search, navigation & quick accessPermission-aware global search for staff; member search within requests, certificates and invoices; deep links from notifications; breadcrumbs with preserved filters; saved views; a 'recent' section; and a unified task center.Fully shown3 screens
  Fully shown
• SPC-07Smart notificationsNotification classes (key event, reminder, operational, marketing/invitations) routed by importance, user preference and policy; low-priority digest; a clear action and link in each message; in-account history even if the external channel fails; versioned templates with preview and test send.Fully shown3 screens
  Fully shown
• SPC-08Explicitly designed UI statesLoading, empty, error, offline, permission denied, expired session, conflict, integration pending, partial success and cancelled/rejected — each with a defined behaviour.Partly shown4 screens
  Partly shown
• SPC-09Accessibility to WCAG 2.1 AAWCAG 2.1 AA as a proposed reference if approved: full keyboard navigation, labelled fields with announced errors, not colour alone, adequate contrast, alt text, logical order in RTL and LTR, text zoom, session-expiry warnings and plain Arabic.Fully shown2 screens
  Fully shown
• SPC-10Personalisation & convenienceA personal member home by situation; hide irrelevant sections; remember language and display preferences; add-to-calendar for courses and expiry dates; smart, low-volume reminders; course suggestions to close CPD gaps; shortcuts like 'Complete your application', 'Upload a document', 'Renew now'.Fully shown3 screens
  Fully shown
• SPC-11Staff experience & less manual workWork lists by priority and SLA; optional auto-assignment with reassignment; safe bulk actions; note and correction templates; data diffs; a 360° member view; duplicate alerts without auto-merge; a 'needs attention' list; reviewer quality metrics; saved filters and columns.Fully shown4 screens
  Fully shown

Mobile app & learning3

• OFR-11Member mobile appAn iOS/Android app in the association's name and identity on the same platform: same account or Nafath sign-in, offline digital card with verification code, requests and camera uploads, payment, renewal and invoices, courses and check-in, CPD and certificates, push notifications, Arabic and English.Partly shown3 screens
  Partly shown
• OFR-12Coursera & Udemy integrationConnect to the association's Coursera for Business and Udemy Business accounts: show courses in the training catalog, enrol or assign members, import progress and completion, convert eligible completions into CPD hours, show them on the member profile, and report enrolments and completion rates.Partly shown3 screens
  Partly shown
• SPC-12Mobile app experience detailsA home centred on the card and urgent tasks, not a mini website; offline card with last sync; camera crop/enhance before upload; notifications open the relevant screen; secure session storage; deep links from email/SMS; visible sync state and no double submit; OS accessibility support.Partly shown1 screens
  Partly shown

Operations & infrastructure5

• OFR-13Independent integration layer with event log & retryOne multi-channel platform that talks to external parties through an independent integration layer with an event log and retry on failure — for Nafath, payment, email, SMS, WhatsApp and learning platforms; any further integration uses the same layer.Partly shown2 screens
  Partly shown
• OFR-14Three environments, initial capacity, horizontal scalingThree separate environments: development, test/acceptance and production. Initial capacity of 20,000 accounts, 500 concurrent users and 100 GB of attachments, scalable horizontally.Infrastructure2 screens
  Infrastructure
• OFR-16Backup & restore targetsDaily full and 6-hourly incremental database backups; 30 daily and 12 monthly copies retained at a separate in-Kingdom site; RPO 6 hours, RTO 4 hours; a documented restore test before launch and quarterly after.Infrastructure1 screens
  Infrastructure
• OFR-17Availability, performance & announced maintenanceMonthly availability target 99.5%; availability and performance monitored every minute with instant alerts; page response target 3 s for 95% of requests; planned maintenance announced 72 h ahead is excluded; performance tested under an agreed load before launch.Partly shown2 screens
  Partly shown
• OFR-18Operations framework, escalation & monthly reportThree-level escalation: service desk, technical lead, project manager. An operations framework covering incidents, problems and root causes, service requests, changes, releases, preventive maintenance and security updates. A monthly SLA, incident and corrective/preventive action report. Support by email, phone and WhatsApp Sun–Thu 8 am–5 pm, critical 24/7.Service & delivery2 screens
  Service & delivery

Security & compliance2

• OFR-15Compliance: PDPL, NCA ECC, ISO and OWASPAlignment with the Personal Data Protection Law (PDPL) and the Essential Cybersecurity Controls; hosting with an ISO/IEC 27001/27017/27018 certified provider; OWASP Top 10 vulnerability testing before launch.Partly shown3 screens
  Partly shown
• SPC-15Guardrails against feature creepNo feature just because it's possible; every extra step needs a reason; advanced settings stay with admins; no AI for sensitive membership/credential decisions without policy, transparency and human review; no sensitive data in external notifications or public verification pages; every feature respects both languages, mobile, permissions and audit.Partly shown2 screens
  Partly shown