National Digital Document Locker Platform — Full Build (GovTech, Payments, Offline Verification)

PROJECT: National Digital Document Locker — a sovereign, government-scale digital document, consent, verification, and payment platform for the Republic of Liberia. This is a FULL BUILD (not an MVP): all core capabilities below must be designed, built, tested, and deployed production-ready. WHAT WE ARE BUILDING A government-owned, citizen-controlled platform through which: - Government agencies issue digitally signed official documents directly into citizens' personal digital lockers (National ID, birth certificates, driver licenses, vehicle registrations, traffic tickets, business licenses, land titles, tax certificates, health and education records) - Citizens manage and share their documents with consent-based, purpose-limited, time-bound access controls and instant revocation - Approved institutions (banks, insurers, employers, universities) verify credentials via tokenized APIs without accessing full document content - Field officers (traffic police, border agents) verify documents OFFLINE via cryptographically signed QR codes - Government fees and fines are assessed, paid (mobile money + bank), receipted, and reconciled to treasury within the platform FULL SCOPE OF WORK 1. Identity and authentication: MFA (password, OTP, biometrics), agency SSO, offline authentication tokens for field officers 2. Citizen digital locker: personal vault with documents, payment receipts, consent history, and shared-access records 3. Agency workspaces: per-ministry namespaces, scoped permissions, document templates, issuance workflows, fee schedules, activity dashboards 4. Document issuance engine: creation, digital signing, QR embedding, delivery into citizen lockers 5. Document lifecycle management: status tracking (active/suspended/revoked/archived/expired), version control, amendment trails, retention enforcement 6. Consent and access engine: purpose limitation, time-bound grants, OTP confirmation for sensitive documents, instant revocation 7. Verification engine: tokenized API returning verified/not-verified status with data minimization 8. QR and offline verification: signed QR on every document; offline-capable mobile app for roadside and border verification with sync on reconnection 9. Payment and receipt engine: fee assessment, payment initiation, mobile-money and bank integration, digital receipts, paid/unpaid tracking, document-payment linkage, treasury reconciliation 10. Immutable audit and compliance layer: append-only logs capturing actor, timestamp, action, justification; tamper evidence; exportable audit reports; compliance dashboards 11. Administration and policy control: agency onboarding, document-type configuration, fee schedules, retention policies, encryption key management 12. Notifications and alerting: push, SMS, and email for issuance, access requests, payments, expirations, suspicious activity 13. Reporting and reconciliation: adoption dashboards, agency activity, financial reconciliation, verification throughput, anomaly detection 14. API and interoperability layer: OAuth 2.0-secured REST APIs for agencies, private institutions, payment processors, and future ECOWAS gateways 15. Multilingual and low-bandwidth design: progressive web app optimized for 2G/3G, SMS/USSD fallback, framework for local languages 16. Sovereign hosting and disaster recovery: in-country data residency, government-controlled encryption keys (HSM or key vault), geo-redundant backup, RPO under 1 hour and RTO under 4 hours, automated failover ARCHITECTURE AND NON-FUNCTIONAL REQUIREMENTS - Cloud-native microservices; API-first; offline-first for field operations; mobile-first PWA for citizens - AES-256 encryption at rest, TLS 1.3 in transit, per-citizen key segmentation - RBAC plus attribute-based context (agency, jurisdiction); separation of duties; elevated audit logging for legal-mandate access; multi-party approval for sensitive financial operations - Penetration-test readiness, source-code escrow, complete documentation, training, and handover TEAM WE ARE LOOKING FOR An experienced team or agency with proven delivery of: - National-scale or enterprise GovTech, digital identity, or document/credential platforms - Payment integrations (African mobile money a strong plus, e.g., MTN MoMo, Orange Money) - Cryptographic signing, verifiable credentials, PKI - Offline-first mobile apps and low-bandwidth PWA design - Security-hardened infrastructure, DevOps, and disaster recovery HOW TO APPLY Please include: (1) your 2-3 most relevant projects and your specific role in them, (2) proposed team composition, (3) a high-level delivery plan with phasing, (4) your approach to offline QR verification and mobile-money reconciliation. A detailed requirements document will be shared with shortlisted candidates. Budget: $300,000 fixed price, milestone-based. Timeline: phased delivery, with the first production-usable release (issuance + citizen locker + QR verification + payments for 6 document types across 5 agencies) targeted within approximately 90 days of kickoff, then expansion to the full capability set.