Case study

Client project

Cozee Care

Disability Services Operational Platform

An internal operational platform for an Australian disability services provider — automated scheduling, controlled access to sensitive records, and an accessible interface for day-to-day care coordination.

Sector
Disability Services & Healthcare
Market
Australia
Technology
Next.js · NestJS · PostgreSQL · JWT authentication · RBAC

Architecture schematic

  1. InterfaceNext.js
  2. AuthenticationJWT
  3. Access controlRBAC
  4. API layerNestJS
  5. DataPostgreSQL
Simplified schematic of the delivered architecture — the internal platform itself is not shown.

01

Context and problem

Cozee Care's team coordinated disability support services through manual, disjointed scheduling and tracking. Sensitive care workflows lived outside a single system, which created operational bottlenecks and put confidential records at risk in a regulated sector.

  • Scheduling and tracking were manual and disjointed.

  • Sensitive care workflows lived outside a single system.

  • Confidential records were at risk in a regulated sector.

02

Approach and key decisions

We designed an internal operational management platform around one goal: make the daily operation reliable without compromising the sensitivity of the data it handles. Scheduling became automated instead of manual, day-to-day workflows were organized in one place, and access to confidential records was placed behind explicit, role-based controls.

Make the daily operation reliable — without compromising the sensitivity of the data it handles.

03

What was designed and built

The platform pairs a Next.js frontend — chosen for its accessibility capabilities — with NestJS APIs and a PostgreSQL database for reliable concurrent operation. Authentication uses JWT, and every request to confidential records passes role-based access control enforced through NestJS Guards. Data is encrypted both at rest and in transit.

Interface
Next.js
Authentication
JWT
Access control
RBAC
API layer
NestJS
Data
PostgreSQL

04

Sahad Labs' contribution

Sahad Labs delivered the platform end to end.

  • Information architecture
  • Accessible interface
  • API layer and data model
  • Authentication and role-based access control

05

Outcome

manual scheduling errors
0
data confidentiality maintained
100%
accessibility of the delivered interfaces
WCAG 2.1 AA

Outcomes as reported for this project. WCAG 2.1 AA compliance refers to the delivered interfaces, aligned with Australian disability service standards.

The client's public website

This is Cozee Care's public service website. The case study above covers a separate internal operational platform delivered for the same organization — that system handles confidential records and is not publicly accessible, so it is not shown here.

Visit cozeecare.com.au

Understand first. Build what matters.

Working on something similar?

Tell us about your situation — we will tell you honestly whether we are the right fit.