Level 1 — Strategy & information governance
GovernanceProject digital charter, EIR/BEP standards, ISO 19650 compliance and asset data dictionaries.
Digital Enterprise Management & Digital as a Platform
One architecture, every tenant, from charter to digital twin
DEM & DAAP is the interoperable layer beneath HFLpass. It connects a public enterprise front end to federated identity, role-based access control and a governed operations engine — then instruments the physical estate through BIM, GIS, SCADA telemetry and predictive twins.
Document 4.3 · Explainer
Watch: HFL Ecosystem 2025 — Unified Digital OS Architecture
An explainer mapping Document 4.3 — a singular digital blueprint merging architecture, intelligence and compliance into a unified operating system. It covers the unified blueprint, the governance spine, the intelligence engine, interconnected modules and PAVER, global scalability, and the digital institution summary.
The hybrid integration model
Four deliberate boundaries. The public surface never talks to the operations database directly, and every request crosses an identity checkpoint before it reaches a tenant workspace.
- Boundary 01
Front-end layer
Public visitors, branding, marketing copy and initial inquiry forms are served from this site and the group domains.
- Boundary 02
Identity & SSO
The Stakeholder Login routes to Microsoft Entra ID or Google Workspace OAuth and resolves the member's HUMI.
- Boundary 03
Role-based access control
Authenticated users land in isolated community spaces — regulators, lenders, key accounts and internal staff.
- Boundary 04
Operations engine
Dataverse, Google AppSheet, Xano or a custom BaaS SQL engine runs SDG/OECD index calculators, CPCP audit logs and savings validation.
The four-layer digital engineering flow
Each layer produces the evidence the next layer audits. Nothing is asserted that cannot be traced back to a charter, a model, a telemetry stream or a validation record.
Level 2 — Digital engineering
BIM · GIS · LOD 100–5003D/4D/5D building information models, geospatial digital alignment and EPC digital commissioning.
Level 3 — Data fabric
SCADA · MES · IoT · ERP · CRMReal-time edge telemetry, the OT–IT bridge, an industrial message bus and operational sensor aggregation.
Level 4 — Twins & AI/ML intelligence
PredictiveLiving physical twin simulation, failure prediction, heat-rate optimisation and autonomous dispatch.
WBS4DEM & DAAP capability map
Eight capability families, each independently deployable and each sharing the same data fabric.
Electrification
Smart grid, substations, DERMS and asset intelligence.
Digital engineering
BIM, GIS, digital twin and LOD management.
Industry 4.0 / 5.0
IoT retrofit, robotics, SCADA/MES and vision AI.
Cybersecurity
OT-SOC, Zero Trust and incident response.
Mobility & surveillance
EV fleet, intelligent transport systems and smart corridors.
Energy & storage
BESS, hydrogen, microgrids and ESCO models.
Water infrastructure
Desalination and SCADA distribution networks.
Education & workforce
Virtual labs and blockchain digital credentials.
Unified execution flow › Lead → Design → Build → Integrate → Deploy → Operate → Optimise → Monetise
Multi-tenant portal topology
Five primary public routes plus an authenticated gateway. Each portal inherits the same design system but its own permissions, catalogue visibility and reporting scope.
hfl-pass.com — public front end
- 01 · Enterprise Homepage
/ - 02 · Strategic Sales & Business Processes
/hflpass-crm - 03 · Governance, Risk & Continuous Improvement
/governance - 04 · Learning & Earning Systems (LMS/EMS)
/learning - 05 · Software Engineering & Standards
/engineering - Stakeholder Portal Login
→ Entra ID / OAuth
Isolated community spaces
- Regulators and government agencies
- Lenders and sovereign capital partners
- Key accounts and enterprise customers
- Value Providers and Channel Partners
- Internal staff, instructors and facilitators
Integration & compliance matrix
What the platform speaks, and what it can prove.
| Layer | Standard / framework | Applied to |
|---|---|---|
| Learning content | SCORM 1.2 / 2004 · AICC · Tin Can (xAPI) | LMS/LX and HFL LEAP packages |
| Digital engineering | ISO 19650 · LOD 100–500 | BIM, GIS and EPC commissioning |
| Security | IEC 62443 · NERC-CIP · Zero Trust | OT/ICS and critical infrastructure |
| Sustainability | UN SDG 2030 — 17 goals, 169 targets | SDG/OECD index calculators |
| Identity | OAuth 2.0 · OIDC federation | HUMI, Entra ID and Google Workspace |
| Governance | Monthly PLC · CPCP sign-off | GRCM audit register |
ICT full-stack platform
Front-end to back-end, AI and blockchain included
HFL's ICT priority is a complete end-to-end dynamic pipeline — a hybridised blend of specialists, AI, multi-sided platforms, industrialised ML/DL content, mentoring and social integration — augmented by a blockchain multi-sided digital platform on Azure / AWS / GCP cloud services.
Core platform processes
- Learning, certification and deployment
- Earning in a digital co-working ecosystem
- Generate enquiries and leads · Enquiry to Quote
- Purchases from the digital marketplace via any payment gateway
- All transactions digitally system-verified and approved in real time, activated only after two digital sign-offs
Administration roles
- Instructional & Learning Design admin
- Learning Modules admin
- Instructional & Earning Design admin
- Earning Modules admin
- EMS admin
- Master admins and super-admin roles govern activation and sign-off.
Deployment, access & governance
The platform ships with role-based access control, 2-factor digital sign-off on activation, and defined security, privacy and performance standards (efficiency, security, privacy and Return on Invested Capital). Detailed internal specifications and the full internal page architecture are maintained in the private governance workspace and are available to approved administrators on request.
Request internal specification access Access hierarchy & automated workflows
Multi-tenant governance, mapped to workflow
Full-stack multi-tenant DEM & DAAP portal with role-based access control, under GDPR, ICOFR, ARIC and UN SDG compliance.
Multi-tenant DEM & DAAP portal
| Level | Role | Access |
|---|---|---|
| 1 | Super Admin | Full system access (Chairman & CEO) |
| 2 | Master Admin | C-level executives (read/write) |
| 3 | Sector / Industry Admin | 2-factor digital sign-off required |
| 4 | Value Provider (VP) Admin | Franchise & LMS/EMS hosting |
| 5 | Channel Partner (CP) Admin | Co-working & lead capture |
| 6 | Subscribers | Sector-based or full access (B2B / B2C / D2C) |
| 7 | Visitors | Pay-per-use / one-time purchase |
Marketing pipeline
- Lead sources: social media, webinars, events, Google My Business
- Marketing automation with GDPR compliance
- Lead scoring: email open +1 · webpage view +2 · form submission +50 · event +50
Sales cycle workflow
- Enquiry to Quote
- Quote to Order
- Order to Cash
- Cash to Life Cycle Management
- Life Cycle Services
- Marketplace Co-Working
AI & blockchain stack
AI engine: VARK learning styles; supervised, unsupervised, semi-supervised and reinforcement learning; cognitive computing, computer vision, ML, neural networks, deep learning and NLP.
Blockchain engine: certification of learning and skills, peer-to-peer ecosystems, payments, knowledge base and marketplace tokenisation.
ERP integration: Microsoft Dynamics F&O via Azure API.
Internal governance workspace
Corporate functions, assurance and internal-controls content, and workplace tools are maintained in the private (intranet) workspace under role-based access — they are not published on the public site.
Map the platform to your estate
We will walk your architects through tenancy, data boundaries, identity federation and a phased migration sequence.
Book a Demo