Skip to content
سافرSAAFER — home page

Institutional solutionsConceptProposed solution

Connecting to government services — a proposed solution

A proposed solution that passes a citizen’s request to the authority that owns the service; the service, its decision and its official portal stay with the authority.

SAAFER is not a national identity and not a government body: one gateway that connects services to their authorities.

Core capabilities

A proposed solution designed to pass a request to its authority — passports, civil registry, tax, civil aviation — once that authority authorises an integration, with document copies in the user’s account and request-state notices from the authority’s system; no integration exists today. The authority remains the owner of the service and the decision.

  • ConceptProposed solution

    Routing requests to government authorities (proposed)

    One gateway inside SAAFER that routes a citizen’s request to the authority that owns the service once it authorises an integration; each service and its official portal stay with the authority.

    • One gateway inside SAAFER
    • Routing a request to its authority
    • Document copies in the user’s account
    • Request-state notices from the authority’s system
  • In developmentProposed solution

    SAAFER account (SAAFER ID)

    An account inside SAAFER for the citizen, the business and the provider — not a national identity and no substitute for one.

    • One account
    • Roles and permissions
    • Verification through the official identity provider if its authority permits (proposed)
    • A consent record
  • ConceptProposed solution

    Workflow

    A request from filing to decision: steps, owners, deadlines, a visible state.

    • Requests and appointments
    • Steps and owners
    • Deadlines and reminders
    • A state the applicant sees
  • ConceptProposed solution

    Document wallet

    Copies for the user of official and business documents, with permissions and a retention period; the official original stays with the issuing authority.

    • Upload and classify
    • Share by permission
    • Versions and copies
    • Limited retention
  • ConceptProposed solution

    Notifications

    The applicant and the institution told of every change, on the channel they choose.

    • In-app notices
    • SMS and e-mail
    • Alert rules
    • Delivery log
  • DemoProposed solution

    Payment integration

    One checkout through licensed payment providers; SAAFER is not a bank or a payment institution.

    • Unified checkout
    • Settlement reports as the licensed provider sends them, and reconciliation
    • Payment status
    • Digital invoices
  • PlannedProposed solution

    API layer

    Documented, authorised interfaces that connect an institution’s systems to SAAFER, with no transfer of ownership or decision.

    • Documented APIs
    • Authorisation and keys
    • Limits and monitoring
    • A sandbox
  • ConceptProposed solution

    Cybersecurity

    Today: TLS, browser security headers and responsible disclosure (Trust Center); proposed: encryption at rest, an audit log and data separation — in words that can be proven.

    • Today: TLS and security headers
    • Today: responsible disclosure
    • Proposed: encryption at rest
    • Proposed: audit log

Modules that can be added: Analytics · Authentication and access

The architecture, simply

Authority / Institution

  1. Passport and immigration authorities
  2. Civil-registry authorities
  3. Tax authorities
  4. Civil-aviation authorities

SAAFERConcept

Technology + Integration + Workflow
  1. Routing requests to government authorities (proposed)
  2. SAAFER account (SAAFER ID)
  3. Workflow
  4. Document wallet
  5. Notifications
  6. Payment integration

Citizen / Business / Provider

  1. Citizen
  2. Business
  3. Provider

Illustrative: no agreement or integration exists with any institution; a proposed solution.

Example use case

Two services from one account

A citizen requests one service from passports and another from the civil registry from the same account: each request goes to its authority, the fee is paid through a licensed provider, and the result returns to the wallet.

What SAAFER does

  • Technology and digital infrastructure
  • Integration and workflow
  • User experience and notifications
  • The API layer
  • Routing to the authority and the documents wallet

What the institution retains

  • Authority and decisions
  • Regulation and licensing
  • Ownership of official data
  • The operational mandate
  • The service itself and its official data

Security and governance

  • In the proposed solution: sensitive data (passports, identities) would be encrypted, with restricted and logged access, short retention, and never in a demo; none of it is built today.
  • Any collaboration would start with a limited written scope the authority agrees and controls; nothing here is deployed or built today.
  • The data belongs to the authority; SAAFER would process it on its instructions under a written agreement (controller/processor), stored where the agreement says.

Principles for institutional environments, in the Trust Center

Interested in a full solution?

The full solution is shared after a conversation with the SAAFER team.