# Portal Origin - Complete Public Knowledge Base & Documentation

> The operating system for modern workspaces. Unifying interactive office campus mapping, peer recognition and rewards, project time tracking, employee directories with dynamic org charts, service desk ticketing, context-aware acronyms, ITAM asset registry, talent acquisition (ATS), total rewards compensation matrices, and enterprise role-based access control (RBAC).

---

## 1. Executive Summary & Platform Overview

Portal Origin is an enterprise workspace management platform built for modern companies, hybrid organizations, and distributed teams. It replaces disjointed, single-purpose SaaS tools with an integrated suite of 10 core modules.

### Key Architectural Tenets
- **Unified Employee Experience**: One interface for workplace maps, social recognition, time logging, internal help desk requests, company directories, asset registry, and compensation leveling.
- **Enterprise Multi-Tenancy**: Dedicated workspaces per customer on custom subdomains (e.g., `acme.portalorigin.com`) with strict database data isolation.
- **Pre-Rendered Public Web Pages**: All public pages on `www.portalorigin.com` are pre-rendered into static HTML with zero runtime database requirements and blazing-fast Time to First Byte (TTFB).
- **Tenant Privacy Protection**: Tenant pages are dynamic, require authentication, and strictly output `X-Robots-Tag: noindex, nofollow, noarchive` to prevent search engine indexing.
- **Role-Based Access Control (RBAC)**: Fine-grained permissions allowing custom roles, department-scoped process admin keys, and scoped API tokens.
- **Seamless Integrations**: Built-in support for SAML 2.0 / SSO, SCIM v2 automated user provisioning, CSV batch imports, and automated organizational charts.

---

## 2. Public Platform Modules & Capabilities

### Module 1: Employee Directory & Org Charts (`/feature/employee-directory`)
Centralized hub for all workforce profiles, reporting structures, and organizational navigation.
- **Centralized Member Profiles**: Comprehensive employee records including job titles, departments, contact info, office locations, manager links, and custom member types (e.g. Regular, Contractor, Intern).
- **Automated Dynamic Org Chart**: Interactive tree hierarchy generated from reporting relationships with zoom, pan, collapse, and instant search capabilities.
- **Instant Coworker Search**: High-performance fuzzy search filtering across names, titles, departments, and skills.
- **SCIM & CSV Synchronization**: Automated roster synchronization with HRIS systems via SCIM 2.0 or bulk CSV uploads.
- **Offboarding & Archive Recovery**: Safely archive departing employees while preserving historical audit logs and reassigning open assets and tickets.

### Module 2: Interactive Campus Maps (`/feature/campus-map`)
Bridge physical office facilities and hybrid teams with in-browser vector mapping.
- **Full Hierarchy Control**: Structure real estate footprint: Sites (campuses / geographical locations) > Buildings > Floors.
- **In-Browser SVG Floorplan Designer**: Grid-based vector drawing tool enabling administrators to sketch walls, conference rooms, doorways, amenities, and desk clusters directly in the browser without CAD software.
- **Dynamic Seat Assignments**: Assign employees to desks with 1-click directory tooling. Changes propagate immediately.
- **Interactive Employee Viewer**: Read-only interactive map for employees with nametag hover cards, department filters, search-by-name, and smooth auto-focus navigation.

### Module 3: Peer-to-Peer Recognition & Rewards (`/feature/recognition`)
A complete recognition ecosystem designed to boost morale, reinforce company core values, and foster appreciation.
- **Live Social Recognition Feed**: Interactive workspace feed where colleagues publicly celebrate wins, tag multiple teammates, attach customized congratulatory messages, and trigger full-screen confetti animations.
- **Hierarchical Monthly Giving Budgets**: Employees receive dedicated points at the beginning of each calendar month to gift to peers. Budgets are evaluated with hierarchical precedence:
  1. *Individual Worker Override* (highest precedence)
  2. *Role-Based Rule*
  3. *Department-Based Rule*
  4. *Workspace Default Baseline* (fallback)
  *Special Note*: Setting any budget to `0` designates **Unlimited Credits** (no point limit for recognizing colleagues).
- **Allowance Rollover Policy**: Workspace administrators can enable or disable rollover. When enabled, unspent monthly gifting points accumulate and roll over month-over-month. When disabled, gifting allowances reset on the 1st of each calendar month.
- **Earned Points Expiration Policy**: Administrators configure reward point longevity:
  - *Never Expire* (default permanent balance)
  - *3 Months*, *6 Months*, *12 Months*, *24 Months*, or *36 Months* from award date.
  Balances automatically track non-expired points and prevent redemption of expired credits.
- **Customizable Core Value Awards**: Create custom branded badges (e.g., "Customer Champion", "Innovation Leader", "Team Player") with custom icons and point values. Managed using Slowly Changing Dimensions (SCD Type 2) for historical auditing.
- **Company Gift Catalog & Rewards Store**: Employees redeem earned points for company swag, gift cards, extra PTO, or custom experiences. Features category filters, search, and live balance affordability indicators.
- **Redemption Fulfillment Queue**: HR and workspace administrators review pending orders, employee details, and fulfill or cancel redemptions with one click.
- **Recognition Analytics & Culture Dashboard**: Real-time charts and KPI metrics including Total Points Given, Total Points Redeemed, Outstanding Point Liability, Monthly Volume Trends, and 12-month unique giver vs. receiver participation.
- **Worker Policy Inspector**: Admin diagnostic tool to simulate and audit any employee's effective budget hierarchy, points spent, remaining allowance, rollover credits, and expiration rules.

### Module 4: Time & Project Tracking (`/feature/time-tracking`)
Frictionless billable hour logging and project time management.
- **Streamlined Daily Timesheets**: Rapid time logging with date selection, project dropdowns, decimal hour inputs, and task descriptions.
- **Billable Project Catalog**: Workspace admins create, configure, and archive billable projects, client codes, and initiative categories.
- **Sortable History & Auditing**: Workers can inspect personal timesheet history with date range filtering, column sorting, and weekly totals.
- **Role-Based Controls**: Restricts project creation, editing, and approval workflows to authorized administrators.
- **CSV Payroll Export**: Export timesheet logs directly to CSV for payroll systems, accounting tools, or client invoices.

### Module 5: Service Desk & Custom Request Management (`/feature/request-system`)
Enterprise IT and HR ticketing with dynamic forms and tiered escalation queues.
- **Dynamic Form Builder**: Custom request form builder supporting short text, long textareas, numbers, dates, and dropdown lists with tooltip guidelines and instant live previews.
- **Global Reusable Dropdowns**: Centralized option catalogs (e.g. Office Locations, Asset Categories, Cost Centers) managed in administration that automatically synchronize across all associated form templates.
- **Custom Workflow Pipelines**: Tailor ticket lifecycles per template with intermediate stages (Triage, In Progress, Review), terminal resolution state markers, and auto-dispatch rules.
- **Multi-Tiered Support Groups (L1 / L2 / L3)**: Structure helpdesk, specialist escalation, and engineering support tiers for automated queue routing.
- **Master Requests & Incident Consolidation**: Cluster multiple child tickets under a single Master Incident (REQ-M-###), coordinate responses, and broadcast chat updates across all linked requests.
- **In-Flight Template Reclassification**: Reclassify misrouted submissions into new form templates with dynamic field mapping without losing ticket history or chat logs.
- **One-Click Cascade Resolution**: Bulk close all child tickets linked to a master incident upon root cause resolution with full immutable audit logs.

### Module 6: Context-Aware Acronym Directory (`/feature/acronym`)
Demystify internal company terminology and accelerate employee onboarding.
- **Context-Aware Duplicate Definitions**: Supports identical acronyms across different departments (e.g., ARR = Annual Recurring Revenue in Sales vs Architecture Review Record in Engineering).
- **Crowdsourced Submissions**: Employees submit new definitions or amendments directly to an approval queue.
- **Administrative Governance**: Process admins review, approve, edit, or reject submitted definitions before publication.
- **Immutable Change Audit Trail**: Full version history tracking every modification, creator, approver, and timestamp.

### Module 7: Centralized Asset Registry (ITAM) (`/feature/asset-management`)
Enterprise ITAM and physical asset management with dynamic schema dictionaries.
- **Dynamic Schema Dictionaries**: Define custom JSONB fields per asset class (Laptops, Monitors, Mobile Devices, Software Licenses) without database migrations.
- **Worker Custody Handoffs**: Assign physical custody of equipment to employees with complete sign-off records and transfer history.
- **Complete IMACD Lifecycle**: Track Install, Move, Add, Change, and Dispose stages with vendor warranties, depreciation, and contract renewal alerts.
- **Cross-Module Linkage**: Integrated directly with Employee Directory and Campus Maps to locate equipment and custodians in real-time.

### Module 8: Talent Acquisition & ATS (`/feature/talent-acquisition`)
End-to-end recruitment platform from job requisition to candidate onboarding.
- **Job Requisition Management**: Draft, approve, and publish job openings with hiring manager assignments, target budgets, and department tags.
- **Branded Public Career Portal**: Dedicated career pages (`/career`) displaying active job postings with online application forms.
- **Multi-Stage Candidate Pipelines**: Visual Kanban candidate stages (Applied, Screen, Technical Interview, Executive Review, Offer, Hired).
- **Collaborative Scorecards**: Interviewers submit ratings, evaluation criteria, and private hiring notes.
- **1-Click Candidate-to-Employee Conversion**: Automatically convert hired candidates into active Employee Directory profiles, assign desk seating, and provision hardware custody.

### Module 9: Total Rewards & Job Matrix (`/feature/total-rewards`)
Visual job architecture, salary banding, and career leveling matrix.
- **Interactive Leveling Canvas**: Visual ReactFlow matrix mapping job families (Engineering, Product, Sales) across standard levels (L1 through L8).
- **Compensation Band Governance**: Define min/mid/max bands for base salary, performance bonus percentages, and equity grants per level and geographic tier.
- **Dual-Track Progression**: Side-by-side progression modeling for Individual Contributor (IC) and Management career tracks to ensure pay equity.
- **Role-Based Salary Privacy**: High-security encryption and strict permission gates protecting executive and sensitive employee compensation data.

### Module 10: Role-Based Access Control & API Governance (`/feature/role-based-access-control`)
Enterprise zero-trust authorization and multi-tenant security.
- **Granular Capability Matrix**: Fine-grained permissions per module (Create, Read, Update, Delete, Export, Administer).
- **Process-Level Admin Delegation**: Delegate admin rights for specific modules (e.g., Campus Map Admin or Recognition Admin) without granting superuser access.
- **Scoped API Tokens**: Issue secure API keys with granular scopes (e.g. `careers:read`, `timesheets:write`) for external webhooks, CI/CD pipelines, and scripts.
- **Strict Multi-Tenant Isolation**: Database-level tenant partitioning ensuring zero data leakage across workspace subdomains.

---

## 3. Frequently Asked Questions (FAQ)

### What is Portal Origin?
Portal Origin is an enterprise workspace operating system that unifies 10 core workplace operations: campus mapping, peer recognition, time tracking, employee directory, service desk ticketing, acronyms, asset registry, ATS recruitment, total rewards matrix, and role-based access control.

### How do monthly gifting budgets work in the Recognition module?
Monthly gifting budgets grant each worker a dedicated pool of points at the beginning of each calendar month to gift to colleagues. Budgets resolve hierarchically: Worker Overrides > Role Rules > Department Rules > Workspace Default. Setting a budget to 0 grants unlimited points.

### Can unspent recognition points roll over?
Yes, when the Giving Budget Rollover policy is enabled, unspent gifting points carry forward to the next month.

### Do earned employee reward points expire?
Administrators can configure earned points to Never Expire, or automatically expire after 3, 6, 12, 24, or 36 months from the date of the award.

### How do organizations get started with Portal Origin?
Users can register a new organization workspace at `https://www.portalorigin.com/client/register` by providing their workspace name, desired subdomain, and administrator credentials in under 60 seconds with no credit card required.

---

## 4. Public ATS & Career API Reference

Portal Origin provides public REST endpoints for querying active job openings without authentication:

### 1. List Public Jobs
- **Endpoint**: `GET /api/public/careers`
- **Response Format**:
  ```json
  {
    "jobs": [
      {
        "key": "req_123",
        "requisition_id": "ENG-2026-01",
        "title": "Senior Full Stack Engineer",
        "department": "Engineering",
        "location": "San Francisco, CA (Hybrid)",
        "description": "Job description markdown or HTML..."
      }
    ]
  }
  ```

### 2. Get Job Details by Requisition ID
- **Endpoint**: `GET /api/public/careers/:reqId`
- **Parameters**: `reqId` (string) - Requisition identifier (e.g., `ENG-2026-01`)
- **Response Format**:
  ```json
  {
    "job": {
      "key": "req_123",
      "requisition_id": "ENG-2026-01",
      "title": "Senior Full Stack Engineer",
      "department": "Engineering",
      "location": "San Francisco, CA (Hybrid)",
      "description": "Full job description..."
    }
  }
  ```

### 3. Submit Job Application
- **Endpoint**: `POST /api/public/careers/:reqId/apply`
- **Request Body**:
  ```json
  {
    "first_name": "Jane",
    "last_name": "Doe",
    "email": "jane.doe@example.com",
    "phone": "+1 (555) 019-2834",
    "resume_text": "Resume content or plain text cover letter..."
  }
  ```

---

## 5. Legal, Privacy & Terms of Service

### Privacy Policy (`https://www.portalorigin.com/privacy`)
- **Governing Jurisdiction**: State of California, United States.
- **California Consumer Privacy Act (CCPA / CPRA)**: Full compliance with California consumer rights including Right to Know, Right to Delete, Right to Correct, Right to Opt-Out of Sale/Sharing, and Right to Non-Discrimination.
- **No Sale of Personal Information**: Portal Origin does not sell personal information or share personal data for cross-context behavioral advertising.
- **Multi-Tenant Data Segregation**: Enterprise customer workspace data is logically isolated per tenant and remains the exclusive property of the tenant.
- **Data Subject Requests**: Inquiries and CCPA verifiable requests can be submitted to `privacy@portalorigin.com`.

### Terms of Service (`https://www.portalorigin.com/terms`)
- **Governing Law**: Governed by the laws of the State of California and federal laws of the United States.
- **Jurisdiction & Venue**: State and federal courts located in California.
- **Customer Data Ownership**: Customers retain 100% intellectual property ownership of all data, rosters, maps, and content uploaded to their workspaces.
- **California Consumer Notice**: California Civil Code § 1789.3 notice with California Department of Consumer Affairs contact details.
- **Legal Inquiries**: Contact `legal@portalorigin.com`.