Locals Command CenterEmployees & testers

Welcome to the Command Center

Open the ☰ menu to manage partner operations and finance, run Dispatch, monitor platform activity, or review IT & Cybersecurity.

🛡️ IT & Cybersecurity

Operational security posture for the Locals platform. ✅ in place · ⚠️ to do.

✅ HTTPS everywhereAll apps served over TLS via Vercel.
✅ Row-Level Security (RLS)Enabled on all Supabase tables; drivers/riders see only their own data.
✅ Secrets server-sidePaystack secret key stored in Supabase Edge secrets — never in client code.
✅ Payment data (PCI)Card data handled by Paystack; Locals never stores full card numbers.
✅ Auth & access controlSupabase auth for driver, dispatch & command; Command Center gated by admins table.
✅ Maps API key restrictionsGoogle key locked to localsgh.com / *.vercel.app referrers.
✅ Privacy & Terms publishedPublic Privacy Policy & Terms of Service live.
✅ Session sign-outCommand Center & driver app support explicit sign-out.
⚠️ Enable MFA for adminsTurn on 2-factor for all staff accounts (Supabase / email provider).
⚠️ Rotate exposed keysRotate the learnfanteapi key that was shared in chat earlier.
⚠️ Backups verifiedConfirm Supabase Pro daily backups + test a restore.
⚠️ Rate limiting / abuseAdd rate limits to public edge functions & booking form.
⚠️ Logging & monitoringSet up error + auth-event logging and alerts.
⚠️ Incident response planDraft a one-page IR runbook (who, what, contacts).
⚠️ Data retention policyDefine how long trip/location data is kept, then auto-purge.
⚠️ Dependency reviewPin & periodically review CDN libraries (Supabase JS, QR, Paystack).

🎙️ Voice Dispatch AI — "Yaw / Adwoa"

Dual-sided dispatch agent for Vapi / Retell / Bland. Detects passenger vs. driver, speaks Fante/Twi/English.


      

Tools / webhooks to configure

Build these as Supabase Edge Functions (like verify-payment) guarded by a shared secret. Use Ghana NLP Khaya + learnfanteapi for Fante/Twi ASR & TTS.

📱 User accounts and login access

Manage sign-in access across every LocalsGH platform. Login access is separate from online activity and application approval. Disable preserves ownership and history. Deletion requires a separate staff review.

Choose a status and account category.
Loading applications…

Previously deleted accounts

The former Disable login button recorded deletions, not reversible suspensions. This read-only audit history may contain the last recorded email and account reference, but not the original name. Recovery requires individual review of login identity and released ownership. No account is restored from this list.

Account and personal-data deletion requests

Review this queue daily. Use the recorded due date. Verify identity, outstanding transactions and retention holds before permanent deletion. Creating a request does not disable login.

Load the queue to see requests and deadlines.

🏪 Merchant store approvals

Create stores that merchants can choose during signup. Approving a claim assigns that store to one account and unlocks edits only for that owner.

Create an available store

Loading merchant claims…

Shop archive approvals

An archive request does not remove a shop immediately. Confirm it here to archive the shop, hide it from customers, and remove the merchant's editing access.

Loading deletion requests…

📡 Live workforce

Providers online and passengers, HouseHosts, and Prefab developers active in their apps. Customer activity is separate from pickup availability. Status refreshes automatically; activity expires after five minutes without an update. History begins when activity tracking is enabled.

0Online now
0People tracked
—Last refreshed
Loading workforce status…

🔔 Customer demand alerts

Notify offline drivers, home attendants and tradesmen when customers are waiting. Admin recipients receive demand email alerts and can be added or removed here.

Demand now

Loading demand…

Automation

Admin email recipients

Recent alerts

No alerts loaded yet.

🏗️ Prefab verification

Use the correct approval level. Prefab Admin controls platform-wide identity and trade verification. A developer or property owner can review and approve an applicant only for their own project.

Prefab Admin

Review submitted profiles, trade roles, licences, merchants and provider claims across Prefab.

Developer verification

Open the Prefab developer web app to review applicants, inspect their status and approve one for a specific project.

Project approval does not change a person’s platform-wide verification status. Only Prefab Admin can do that.
Command Center
Manage platform operations

Locals Command Center

Employees & testers only. Sign in with your Locals staff account.

Forgot password?
Command Center · internal build