Plays well with your stack.
Live means an implementation exists in the current product path. Beta means the scope or availability is limited. Planned means it is not available in the standard product path today. Provider approval, credentials and deployment configuration can still be required.
Identity & sign-in
How a board member proves who they are.
Email OTP
One-time code delivered to the user's email. No password to phish, no password to reset.
Codes expire in 10 minutes; rate-limited per email + per IP.
LiveWhatsApp OTP
OTP delivered through your WhatsApp Business API number. Faster on mobile, doubles as proof-of-presence.
Delivery requires a configured WhatsApp provider and approved templates.
LiveSAML 2.0 (Microsoft 365, Google Workspace, Okta)
Enterprise tier. SP-initiated SSO with JIT user provisioning and group-to-role mapping.
Not included in the standard hosted path today.
PlannedOpenID Connect
For tenants standardised on OIDC (Auth0, Keycloak, Authentik).
Not included in the standard hosted path today.
PlannedMagic-link login
Single-click signed URL emailed to the user. Useful for very low-frequency board members.
Availability depends on the tenant configuration.
BetaCommunication
How Mithaq talks to your members.
WhatsApp Business API
Outbound for OTP + meeting reminders + decision broadcasts. Bring your own WABA number or use a Dardasha shared number.
Per-tenant template approval is your responsibility; we ship the request schema.
LiveSMTP relay
Bring your own SMTP (Postfix, SES, Resend, M365 SMTP). DKIM expected at the relay.
Sender identity and delivery policy depend on the configured relay.
LiveIn-app notifications
Bell-icon dropdown in the workspace header, badge on every tab, push to user inbox.
No external service required.
LiveWeb push (PWA)
Browser notifications via the Push API for users who install the PWA.
Not available in the standard product path today.
PlannedPayments & billing
How money moves in and out.
Paymob Oman
Paymob checkout is available for subscription billing where the deployment has an enabled merchant account.
The webhook is HMAC-verified and payment methods depend on the merchant configuration.
LiveBank transfer (manual)
Manual bank-transfer settlement can be recorded for annual Enterprise and On-Prem arrangements.
Verified payment instructions are supplied on the applicable commercial document.
LiveStripe
For tenants billing in USD/EUR (e.g., GCC family offices with foreign holdings).
Not available in the standard product path today.
PlannedCalendar & scheduling
How meetings reach the rest of the world.
ICS export per meeting
Every meeting page exposes an .ics link. Drops cleanly into Outlook, Google Calendar, Apple Calendar.
Includes attendees, location, agenda link, organiser email.
LiveICS feed per board
A single subscribable URL for the board's entire meeting calendar.
Auth-token in URL; revocable per user from /my.
LiveGoogle Calendar two-way sync
OAuth connect and Mithaq pushes meetings + accepts RSVPs back.
Not available in the standard product path today.
PlannedOutlook / Microsoft 365 and Teams sync
Mithaq creates, updates and cancels the Outlook event for each meeting on a service mailbox through Microsoft Graph, and Exchange sends the invitations. Virtual and hybrid sittings get a Teams meeting.
Application permission on the customer's own Entra app (Calendars.ReadWrite). Verified against a mocked Graph in the test suite; the first live run happens with the customer's tenant.
BetaEnterprise module connectors
How Mithaq exchanges records with the systems a listed company already runs.
Document management
Board papers, minutes and resolutions leave as versioned records with classification and a fetch URL; the archive's receipt is written back on the document.
Connector framework with outbox, retry and audit is in place. The customer-specific adapter is written once the module's interface specification is supplied.
BetaNotifications and alerts platform
Agenda submission reminders, pack circulation alerts, approval reminders and action item notifications mirrored to the enterprise channel.
Same framework. Mithaq keeps sending its own email and WhatsApp in parallel.
BetaCompliance and risk management
Obligations, disclosures, conflict declarations and compliance actions out; filing status back onto the obligation register.
Same framework. Field mapping documented per record type.
BetaEnterprise performance management
KPI packs and initiative reports arrive per period, are validated and shown to the board; the review is acknowledged back to management.
Inbound JSON accepted today through a generic endpoint adapter; a pull adapter follows the module specification.
BetaJob order management
Actions arising from decisions become job orders with their source decision and meeting; completion status flows back onto the action.
Same framework. Office of the Chief Executive deliverables are flagged.
BetaAPI & automation
For partners and internal IT.
Public discovery API
/api/mithaq/sectors.json, /modules.json, /health.json. CORS-open, cacheable, no auth needed.
Powers partner directory pages and the on-prem sizing tool.
LivePer-tenant REST API
Read-only endpoints for athletes, results, meetings, decisions on the OFC tenant.
Selected public federation endpoints are available on fencing.om. Authenticated scope varies by deployment.
BetaAPI keys
Per-tenant keys with scope (read/write/admin) and rotation. Self-serve from /board/settings.
Confirm the current scope before designing a production integration.
PlannedOutbound webhooks
POST to your URL on meeting-created, decision-passed, member-joined, payment-received. HMAC-signed.
Confirm the current event catalogue before designing a production integration.
PlannedCSV export
CSV export routes are available for selected public entities, including published federation data.
Available fields and entities are route-specific.
LiveJSON feeds
RSS, Atom and JSON discovery feeds are published for supported public content types.
Pages advertise alternate feeds where a matching feed exists.
LiveStorage & backup
Where data sits and how it leaves.
Local FS per tenant
data/tenants/<slug>/ on the host. Atomic writes via withFileLock(). Default for both Cloud and On-Prem.
Backup ownership, retention and offsite replication depend on the deployment agreement.
LiveDaily backup, encrypted when a key is configured
tar.gz per tenant with a SHA-256 manifest, written to the backup volume. Set BACKUP_PASSPHRASE_FILE and each archive is AES-256 encrypted before it lands.
Operation and retention depend on the deployment configuration.
LiveS3-compatible offsite
Push the encrypted daily tarball to your S3 / R2 / Wasabi bucket.
Not available in the standard product path today.
PlannedAzure Blob offsite
Same as S3, for tenants standardised on Azure.
Not available in the standard product path today.
PlannedDocuments & embeds
How Mithaq output reaches non-users.
PDF export (server-rendered)
Meeting minutes, board packs, financial summaries, member statements. Browser-print-quality, header + footer + page numbers.
Powered by headless Chromium; runs in the same Node process.
LivePublic dashboards (iframe-friendly)
Pick which widgets are public, get an embed URL, drop it on your annual report.
Used by OFC for the public results widget at fencing.om.
LiveDOCX export
For boards that still circulate Word documents. Same source-of-truth, different render.
Not available in the standard product path today.
Planned