M
Mahyar NasiriDeveloper
Back to Projects
WebsiteCompleted2026

ITEV

A comprehensive IT and cyber-security evaluation management system for assessing regional readiness through scored inspections, evidence collection, analytics, and performance rankings.

ITEV

Overview

ITEV is a production-ready evaluation management platform designed to assess IT and cyber-security readiness across regions. Inspectors complete structured and scored evaluation forms with image or voice evidence, while approvers review submissions, adjust scores when necessary, and finalize evaluations. The platform provides a complete evaluation lifecycle with deadline enforcement, post-submission locking, Persian-calendar-based seasonal analytics, regional rankings, historical comparisons, and head-to-head province comparisons. It also includes granular role-based access control, customizable permissions, a searchable audit trail, secure authentication, rate limiting, and protected evidence uploads. Built with Next.js 16 and TypeScript, using PostgreSQL with Drizzle ORM and Redis for caching and rate limiting.

Key Features

Scored Evaluation Forms
Image & Voice Evidence Collection
Complete Evaluation Lifecycle
Seasonal Analytics & Rankings
Region Comparison & Historical Tracking
Role-Based Access Control
Custom Roles & Permissions
Full Audit Trail
Excel Template Import
Secure Evidence Uploads

Development Process

Challenges Faced

  1. 01

    Designing a complete evaluation workflow with drafts, submissions, reviews, deadlines, and finalization

  2. 02

    Building meaningful seasonal analytics using Persian-calendar evaluation dates

  3. 03

    Implementing granular permissions for system and custom roles

  4. 04

    Securing uploaded evidence files against unauthorized access and malicious content

Solutions Implemented

  1. 01

    Implemented a structured form lifecycle with locking, review, score adjustment, and finalization states

  2. 02

    Built seasonal analytics, rankings, and historical comparisons using Jalali evaluation dates

  3. 03

    Created a granular RBAC system with built-in roles and configurable custom permissions

  4. 04

    Added MIME and magic-byte validation, private storage, authenticated access, and upload limits