Compliance Evidence & Document Management System
An Arabic (RTL) system for collecting, reviewing and approving evidence documents against Saudi digital-government measurement (Qiyas) standards, organized by site and year.
- .NET 8
- EF Core 9
- SQL Server
- ASP.NET Core Identity
- JWT
01 Overview
- Project
- Compliance Evidence & Document Management System
- Country
- Saudi Arabia
- Role
- Sole developer
- Context
- Freelance · Built end to end — independent delivery
- Environment
- .NET 8 · ASP.NET Core MVC · EF Core 9 · SQL Server
- Period
- 2026
02 Problem
Organizations preparing for Saudi digital-government measurement collect evidence documents against a structured framework of standards and requirements, per site and per year.
Every document needs review and approval, users must only see their own sites’ data, and every change has to be traceable.
03 What I did
- Designed and built the whole system: layered architecture (Core, Infrastructure, Service, Web).
- Generic repository and Unit of Work, with transactions that run through EF Core’s execution strategy.
- Site-level row security built with expression trees and applied automatically in the data layer.
- ASP.NET Core Identity with JWT access and refresh tokens, and permission-based authorization policies.
- Document versioning with SHA-256 integrity hashes and a review → approval workflow.
- Audit trail through EF Core change tracking, and SQL Server reporting with stored procedures and views.
04 What the platform does
Row security by site
Users only ever see their own sites’ data — enforced once, in the data layer.
Versioned evidence
Every upload is a new version with its own SHA-256 hash; reviews and approvals are recorded per version.
Review → approval
Documents move from draft to review to approval, with reviewers claiming their work.
Full audit trail
Who changed what and when, with old and new values.
Dashboards
Completion and quality reporting from SQL Server stored procedures and views.
Arabic first
Right-to-left interface with Arabic email notifications.
05 Screenshots
1 / 9 Analytics dashboard — requirements, documents and completion at a glance
Screenshots use demo data.
06 Architecture
Web
- ASP.NET Core MVCArabic RTL
- JWT & permission policies
Service
- Documents & workflow
- Standards & dashboards
Infrastructure
- Repository + Unit of Work
- Row-level site filters
- Audit interceptor
Data
- SQL ServerStored procedures · views
07 Security
- Site-level row security applied centrally in the data layer.
- JWT access / refresh tokens and permission-based authorization policies.
- Owner and assigned-reviewer checks on document operations.
- Anti-forgery protection, SHA-256 integrity hashes and a full audit trail.
08 Technology
Backend
- C#
- .NET 8
- ASP.NET Core MVC
- ASP.NET Core Identity
- JWT
Data
- EF Core 9
- SQL Server
- Stored Procedures
- SQL Views
- Migrations
Patterns
- Repository
- Unit of Work
- Expression trees
- Policy-based authorization
Other
- SHA-256
- MailKit
- Arabic RTL
09 Outcome
- A complete evidence workflow from upload to approval, with version integrity and a full audit trail.
- In production.