Bank-grade control center for Assouca operations.

A hardened admin landing page for super admins and approved department admins. It keeps the public entry simple while pushing real authorization, MFA, policy checks, and audit enforcement to the server.

15m

Admin idle policy

MFA

Step-up ready

RBAC

Department scoped

Security rule: this page never grants access by itself. Every privileged action must still be validated by gateway, IAM, role policy, session state, MFA state, and department scope.

Identity-first access

IAM

Admin entry is designed around server-side session checks, role policy, MFA, and approved department assignment.

No public indexing

Privacy

The landing page is intentionally marked noindex and avoids exposing internal operational data to public crawlers.

Least-privilege routing

RBAC

Authenticated admins are routed to the dashboard allowed by their actor context instead of a universal privileged screen.

Operational governance

Audit

The page sets the expectation that every sensitive action must still be enforced by gateway and IAM policies.

Department-ready

Built for separated admin responsibilities

The UI presents the operating model without exposing private metrics. Actual department visibility must come from the authenticated dashboard after policy enforcement.

Customer Operations

Customer cases, account review, tickets, refunds, and trusted support workflows.

Vendor Operations

Vendor onboarding, KYC review, store status, risk escalations, and compliance checks.

Orders & Fulfillment

Order visibility, exception handling, delivery coordination, and fulfillment controls.

Wallet & Payments

Wallet activity, payout support, reconciliation views, and payment operations.

BNPL Risk

Eligibility review, risk monitoring, account limits, and repayment escalations.

Security Governance

Privileged access, audit trails, policy checks, suspicious activity, and incident response.