Platform activity
Device transactions recorded across all organizations.
PLATFORM COMMAND CENTER
Platform Overview
Business, usage, security, and infrastructure visibility across every organization.
Successful logins
Organization sign-ins during the selected period.
License mix
Current organization license types.
Operational alerts
Items that deserve Platform Owner attention.
RELEASE GATE
Launch Readiness
Owner-only preflight for the production systems required before CampusOps HQ is promoted to a v1.0 release candidate.
Required production controls
Failures here should be resolved before commercial launch. Optional integrations do not block the release.
Protected production snapshot
Read-only counts for the data classes protected by the deployment preservation guard.
Security posture
Runtime protections enabled by the launch-hardening build.
Release rule: this screen never changes customer data, billing, credentials, or feature flags. It is an owner-only read-only preflight.
CUSTOMERS & TENANTS
Organizations
Create customers, inspect usage, control licensing, suspend access, and manage organization-wide settings.
| Organization | Status | Plan | Seats | Campuses | Students | Devices | Setup | Last activity |
|---|
ORGANIZATION CONTROL
Organization
Organization Onboarding
Live setup progress derived from the customer organization. Required steps update automatically as the school configures CampusOps HQ.
Access status
Suspend or reactivate the entire customer organization.
License & billing controls
Owner overrides independent of the future payment provider.
Locations
All campuses and physical locations configured by this organization.
Google Directory sync health
Read-only visibility into this customer's Google Workspace + Chrome Enterprise connection. The Command Center never exposes the service-account private key and does not run tenant syncs on the customer's behalf.
| Started | Resource | Status | Seen | Created | Updated | Skipped | Errors |
|---|---|---|---|---|---|---|---|
| No Google sync history. | |||||||
Administrator access recovery
Owner-only emergency controls for customer Administrator and IT Admin accounts. Password resets revoke all web/mobile sessions and clear temporary login lockouts.
Feature controls
Platform-level switches for staged or customer-specific capabilities.
PLATFORM SECURITY
Platform Owners
Accounts with authority above every organization. New temporary passwords are shown once.
Owner access controls
Disable compromised owner accounts, revoke sessions, or issue a one-time recovery password. The last active Platform Owner can never be disabled.
| Owner | Status | MFA | Sessions | Last login | Created | Security actions |
|---|
PLATFORM OWNER SECURITY
Owner Security & Recovery
Protect the Command Center with an authenticator app and register independent passkeys/security keys for phishing-resistant emergency access.
Recommended owner setup1) Enable authenticator 2FA for password sign-in. 2) Register your phone as a passkey. 3) Register a separate USB/NFC FIDO2 security key and store it safely as your last-resort credential.
Authenticator App (2FA)
Password sign-in requires a fresh 6-digit authenticator code after enrollment.
Scan this QR code
Open Google Authenticator, Microsoft Authenticator, Authy, 1Password, or another standards-based authenticator and scan the code.
Manual setup key
Disabling owner 2FA reduces Command Center protection. Use only when intentionally re-enrolling.
Phone / Passkey / Security Key
WebAuthn credentials use public-key cryptography and require device PIN/biometric or security-key user verification.
Works with: iPhone/Android passkeys, Windows Hello, Touch ID, and FIDO2 USB/NFC/Bluetooth security keys. The browser decides which compatible authenticators are available.
Last-resort rule: do not keep every recovery credential on the same device. A phone plus a physically separate USB/NFC security key gives you an independent recovery path if one device is lost or unavailable.
CUSTOMER SUPPORT
Support Inbox
Customer-created CampusOps HQ support requests with organization and account context attached automatically.
Customer tickets
Prioritized by urgency and active status.
Select a ticket
Conversation and Platform Owner controls will appear here.
TRANSACTIONAL EMAIL
Email & Account Recovery
Password reset, account invitations, security notices, support replies, and billing alerts.
Platform configuration
CampusOps HQ uses a platform-level transactional email provider. API credentials are stored as Cloudflare Worker secrets and are never returned here.
Setup command:
Use a verified sending domain such as
npm run production:email:configureUse a verified sending domain such as
mail.campusopshq.com. Customer organizations do not need their own email-provider account.Recent delivery log
Operational delivery status only. CampusOps HQ does not store email API keys or account passwords in this log.
| Time | Organization | Type | Recipient | Subject | Status | Provider ID / Error |
|---|---|---|---|---|---|---|
| No delivery records yet. | ||||||
OWNER ACCOUNTABILITY
Platform Audit
Permanent record of Platform Owner sign-ins and cross-organization changes.
| Time | Owner | Action | Organization | Summary | Network |
|---|