This will reset all platform preferences, timeout intervals, branding overrides, and currency cache to default system baselines. Active production database tables and user credentials will not be affected.

Send Diagnostic Test Email

Verifies SMTP handshake, TLS certificate, and SPF/DKIM delivery.

Destination Test Recipient

SUPER ADMIN GOVERNANCE · SYSTEM ARCHITECTURE & PREFERENCES

Platform Settings

Configure enterprise branding, transactional email gateways, security policies, multi-currency engines, and system-wide operational rules.

Platform Engine

v3.8.4 Enterprise

Live

Production Cluster · Primary Ghana AWS

Security Hardening

Level 4 Strict

2FA Active

Mandatory Super Admin 2FA · TTL: 60m

Outbound SMTP

SendGrid Pro

99.9% SPF

Port 587 (TLS) · 50,000/day throughput

Treasury & Base

GH₵ (GHS) Base

BoG Sync

6 Active Currencies · Hourly auto FX sync

Platform Identity & Corporate Information

Defines the legal entity, platform name, and primary support contact channels displayed to all portal users.

Platform Public Display Name *Brand title rendered across page headers, system notifications, and metadata.

Registered Corporate Legal Entity *Printed on billing statements, tax receipts (GRA VAT / NHIL), and contracts.

Public Support Inquiries Email *Primary recipient for inbound candidate and employer inquiries.

Urgent Support Hotline / WhatsAppDirect telephone contact displayed on help pages and invoice footers.

Headquarters Physical AddressOfficial operating location for compliance and corporate documentation.

Server Default Timezone *Standard reference timezone used for cron execution, audit logs, and analytics.

Operating Mode & Access Gate Controls

Control global access gates, maintenance status, and onboarding permission thresholds.

Platform Scheduled Maintenance Mode

When enabled, non-super-admin users will be redirected to the holding maintenance screen.

Offline (Normal)

Open Candidate Self-Registration

Allows public jobseekers to register profiles and apply directly without prior manual invitation.

Enabled (Public)

Recruiter Agency Onboarding Gate

Recruiter applications require Super Admin compliance vetting before access to job requisitions is provisioned.

Approval Required

Employer Organization Verification Policy

Tier-1 business registration number (RGD / Registrar General Ghana) required to publish active paid jobs.

Strict (GRA / RGD)

Visual Identity & Core Brand Assets

Manage platform logo marks, color tokens, and web browser icon signatures.

Primary Platform Logo URL (SVG / PNG)Rendered on the dark navy Super Admin & Recruiter navigation sidebars.

Light Background Logo URLUsed on white PDF invoices, export candidate portfolios, and email headers.

Browser Favicon URL (.ico / .png)Standard 32x32px or 64x64px browser bookmark & tab icon.

Action Blue Primary Brand ColorDesign token --8e150fc9-01de-4e5c-89bd-22860a799abc used for primary CTAs and active states.

Accent Orange Highlight ColorToken --42167598-92a9-4a5c-a67f-221537da3761 used for high-contrast pills and notifications.

Corporate Foundation NavyToken --39455921-09cc-4177-8a89-091ae556e58f foundational color for headings and executive surfaces.

White-Labeling & Custom Domain Routing

Manage tenant custom domains, SSL certificates, and platform watermark attribution.

Super Admin & Portal App DomainVerified CNAME pointing to Cloudflare Edge · Status: Active SSL

Public Candidate Job Board DomainPrimary public SEO directory for open vacancies.

Enterprise White-Labeling Engine

Allows Enterprise clients to mask system URLs with their own brand domains.

Active Tier

Remove 'Powered by JobsAIG' Badge

Hides vendor badges on candidate assessment tests and client career pages.

Suppressed

Outbound SMTP Delivery Infrastructure

Configure outbound mail server connections, encryption protocols, and verified sender addresses.

SMTP Relay Hostname *SendGrid, Amazon SES, or Mailgun high-deliverability SMTP gateway.

SMTP Port & Protocol *Port 587 recommended for TLS; port 465 for SSL.

Sender Friendly Display Name *Name presented in recipient inbox headers (e.g. 'JobsAIG Alerts').

Default From Mailbox Address *Must match verified domain records to pass SPF and DMARC checks.

Reply-To AddressDirect destination when candidates or employers click 'Reply' in email.

SMTP Password / API Auth Token *

Required for outbound platform email.

Domain Authentication & Diagnostic Testing

Live SPF, DKIM, and DMARC alignment status for @jobsaig.com sender domain.

DKIM Signature

Verified (2048-bit RSA active)

SPF Alignment

Pass (v=spf1 include:sendgrid.net)

DMARC Policy

Pass (p=reject · 100% enforcement)

Live SMTP Gateway Health Check

Send a real-time probe message to test transport latency and authentication headers.

Multi-Channel Dispatch Infrastructure

Control global delivery gateways for in-app bell alerts, SMS, transactional email, and WhatsApp.

In-App Real-Time Bell Notifications

Websocket push to header notification bell across Candidate, Recruiter, and Super Admin portals.

Enabled (Active)

Transactional Email System Notifications

Triggered on job matches, interview scheduling, offer letters, and security logins.

Enabled (SendGrid)

SMS Mobile Gateway (Hubtel / Twilio Ghana)

High-priority OTP authentication and urgent interview reminder dispatch to mobile networks.

Active (Hubtel Primary)

WhatsApp Business Interactive Notifications

Meta Verified Cloud API dispatch for candidate interview invites and recruiter updates.

Connected (+233)

Browser Web Push Notifications (Service Worker)

VAPID keys active for instant desktop & mobile PWA alerts.

Enabled

Cadence Policies & Critical Security Webhook

Schedule candidate digests, employer billing reminders, and route security webhooks.

Candidate Job Alert Digest FrequencyBatched matching jobs delivered based on candidate skill preferences.

Invoice Due Reminder CadenceAutomated notice sent to employer billing managers for pending invoices.

Security Incident Webhook (Slack / Discord / PagerDuty)Receives immediate POST payloads on lockout alerts, KYC flags, or DDoS blocks.

Recruiter Placement Milestones DispatchReal-time updates on candidate interview confirmations and commission payouts.

Administrative Access & Session Governance

Enforce multi-factor verification, inactivity timeouts, and account lockout thresholds.

Super Admin Inactivity Timeout (Minutes) *Forces high-privilege Super Admin re-authentication upon session idle.

Recruiter & Employer Session Timeout (Minutes) *Idle duration allowed for recruiters before session expiration.

Max Consecutive Failed Logins *Account automatically locked if wrong credentials entered repeatedly.

Temporary Lockout Cooldown (Minutes) *Duration before automatic account unlock attempt is permitted.

Multi-Factor Authentication (MFA) Scope *Requires TOTP authenticator (Google Authenticator / 1Password) upon login.

Audit Trail Retention Window (Days) *Immutable tamper-evident logging stored in compliance archive tables.

Network Protection & IP Perimeter Filters

Configure IP whitelisting for Super Admin access, SSL HSTS transport, and rate limiters.

Super Admin Permitted IP CIDR SubnetsComma-separated IPs permitted to access /super-admin routes. Leave empty to allow all.

API Global Rate Limit (Requests / Minute)Per-IP throttle window handled at edge gateway before backend compute.

HTTP Strict Transport Security (HSTS)

Enforces TLS encryption with preloaded browser directives.

Strict (31536000s)

Concurrent Admin Session Restriction

Terminates older administrative sessions when a new login occurs.

Single Active

Single Sign-On (SSO) & Federated Identity

Configure social authentication protocols and enterprise identity provider connections.

Google Workspace OAuth

Active

Client ID: 4092183910-gh72...apps.googleusercontent.com

Allowed: Candidates, Recruiters & Staff

Microsoft Azure AD / Entra

Active

Tenant: 8f91c280-99da-4d8b-b1e0-6a1928374829

Allowed: Enterprise Employers & Super Admins

LinkedIn Social Login

Active

App ID: 78a9c218849102 · Profile v2 & Email Scope

Allowed: Jobseekers & Freelance Recruiters

Custom SAML 2.0 / Okta

Enterprise

ACS: https://app.jobsaig.com/auth/saml/callback

Allowed: Enterprise Dedicated Tenants

Credential Rules & Token Lifecycles

Specify password complexity enforcement and JWT session refresh schedules.

Minimum Password Length (Characters) *Recommended 12+ characters to meet ISO 27001 & SOC-2 compliance.

JWT Access Token Lifespan (Minutes) *Short-lived cryptographically signed token returned to clients.

HTTP-Only Refresh Token TTL (Days) *Maximum duration before user must provide full credentials again.

Admin Password Rotation Policy (Days)Enforced prompt requiring Super Admins to rotate master passwords.

Regional Standards & Supported Locales

Define default platform language, supported i18n translation catalogs, and calendar formats.

Platform Default UI Locale *Baseline catalog used when user preference is not set or translated.

Active Multi-Lingual Locales *Enables candidate UI translation switcher in portal topbar.

Standard Date Presentation Format *Commonwealth standard date format used across tables and invoice headers.

Clock Display Standard *Applied to interview schedules, calendar invites, and audit logs.

Number Representation & Phone Standards

Configure thousand delimiters, decimal points, and international dial codes.

Decimal Separator Mark *Separates whole numbers from fractional cents or percentages.

Thousands Grouping Delimiter *Groups large salary benchmarks (e.g. GH₵ 150,000.00).

Default Country Dial Prefix *Pre-fills phone inputs on mobile registration screens.

E.164 Phone Number Sanitization

Enforces international format required by SMS & WhatsApp gateways.

Strict (Enforced)

Platform Ledger Base Currency & Multi-Currency Engine

Configure financial accounting currency, real-time FX rate syncs, and volatility buffers.

Platform Primary Accounting Currency *Central treasury currency used for financial ledger reporting & tax compliance.

Supported Secondary Currencies *Allows employers to post salary ranges and pay invoices in local currencies.

Automated Exchange Rate Source *Authoritative central bank benchmark for West African FX rates.

FX Sync Automated Schedule *Background cron tasks re-fetch rates and recalculate marketplace conversions.

Pricing Display & Invoicing Precision

Set symbol placement standards, rounding decimal points, and statutory tax breakdowns.

Currency Symbol Placement *Standard prefix representation across job cards and employer invoice summaries.

Financial Rounding Precision *Rounds cents accurately to prevent fractional currency imbalances.

Statutory Invoice Tax Breakdown Policy *Mandatory tax lines itemized automatically on generated PDF invoices.

Dynamic In-App Currency Switcher

Permits jobseekers to toggle salary representations across USD / GHS / EUR.

Enabled

Marketplace Governance & Operational Rules

Enforce placement warranties, default commission baselines, and upload storage quotas.

Placement Warranty Guarantee (Days) *Candidate replacement guarantee timeframe after employer hires through marketplace.

Standard Job Requisition Active Lifespan (Days) *Active posting window before post is marked expired or requires manual renewal.

Standard Recruiter Success Commission Baseline (%) *Default marketplace placement commission split calculated from first year annual base.

Maximum Candidate Resume Upload Cap (MB) *Enforced on AWS S3 multi-part uploads for PDF/DOCX formats.

AI Matching Engine, Caching & Telemetry

Tune match score screening sensitivity, in-memory caching TTL, and observability.

AI Resume Match Score Pass Threshold (%) *Candidates scoring above this threshold receive automated 'Strong Match' badges.

Redis Memory Response Cache TTL (Seconds) *Caches heavy salary benchmark rollups and taxonomy dictionaries.

Dormant Candidate Application Auto-Archive (Days) *Stale applications with no movement automatically transitioned to cold storage.

Telemetry & APM Profiling

Distributed tracing with OpenTelemetry & Datadog agent.

Operational (0.01% Error)