Case study
Client projectCozee Care
Disability Services Operational Platform
An internal operational platform for an Australian disability services provider — automated scheduling, controlled access to sensitive records, and an accessible interface for day-to-day care coordination.
- Sector
- Disability Services & Healthcare
- Market
- Australia
- Technology
- Next.js · NestJS · PostgreSQL · JWT authentication · RBAC
Architecture schematic
- InterfaceNext.js
- AuthenticationJWT
- Access controlRBAC
- API layerNestJS
- DataPostgreSQL
01
Context and problem
Cozee Care's team coordinated disability support services through manual, disjointed scheduling and tracking. Sensitive care workflows lived outside a single system, which created operational bottlenecks and put confidential records at risk in a regulated sector.
Scheduling and tracking were manual and disjointed.
Sensitive care workflows lived outside a single system.
Confidential records were at risk in a regulated sector.
02
Approach and key decisions
We designed an internal operational management platform around one goal: make the daily operation reliable without compromising the sensitivity of the data it handles. Scheduling became automated instead of manual, day-to-day workflows were organized in one place, and access to confidential records was placed behind explicit, role-based controls.
Make the daily operation reliable — without compromising the sensitivity of the data it handles.
03
What was designed and built
The platform pairs a Next.js frontend — chosen for its accessibility capabilities — with NestJS APIs and a PostgreSQL database for reliable concurrent operation. Authentication uses JWT, and every request to confidential records passes role-based access control enforced through NestJS Guards. Data is encrypted both at rest and in transit.
- Interface
- Next.js
- Authentication
- JWT
- Access control
- RBAC
- API layer
- NestJS
- Data
- PostgreSQL
04
Sahad Labs' contribution
Sahad Labs delivered the platform end to end.
- Information architecture
- Accessible interface
- API layer and data model
- Authentication and role-based access control
05
Outcome
- manual scheduling errors
- 0
- data confidentiality maintained
- 100%
- accessibility of the delivered interfaces
- WCAG 2.1 AA
Outcomes as reported for this project. WCAG 2.1 AA compliance refers to the delivered interfaces, aligned with Australian disability service standards.
The client's public website
This is Cozee Care's public service website. The case study above covers a separate internal operational platform delivered for the same organization — that system handles confidential records and is not publicly accessible, so it is not shown here.
Understand first. Build what matters.
Working on something similar?
Tell us about your situation — we will tell you honestly whether we are the right fit.
