high complexity extracted Encrypted Data Assignments Confidence: 100%
12
Components
106
Shared
0
User Stories
Yes
Analyzed

Description

This feature enables coordinators to securely dispatch sensitive personal information — including names, addresses, and medical summaries (epikriser) — to peer mentors as encrypted assignments. Each assignment is delivered with end-to-end encryption, delivery confirmation, and read receipts, ensuring that sensitive data never travels unprotected. The feature also provides coordinators with a real-time status overview of all open assignments and triggers automatic reminders if a peer mentor has not established contact within 10 days of receiving an assignment.

User Flow

Encrypted Assignment Dispatch user flow
Click to expand

Analysis

Business Value

Handling sensitive personal data — health records, home addresses, crisis situations — is a legal and ethical obligation under GDPR and sector-specific Norwegian regulations. Without encrypted assignment dispatch, organizations like Blindeforbundet cannot use a digital tool for this workflow at all, making it a hard blocker for adoption. The feature replaces manual phone calls and paper-based handoffs, dramatically reducing the risk of data breaches while creating an auditable trail of every assignment. Coordinators gain real-time visibility into assignment status, eliminating the follow-up overhead that currently consumes significant coordinator time each week.

Implementation Notes

Assignments must be encrypted at rest and in transit using asymmetric encryption (e.g., RSA or ECDH key pairs per user, stored in device secure enclave / Keychain). The Flutter client generates or retrieves the peer mentor's public key from the backend before encrypting the payload client-side; the backend never sees plaintext sensitive fields. Delivery and read receipts are tracked via REST API callbacks triggered when the assignment record is first fetched and first opened. The 10-day auto-reminder is implemented as a server-side scheduled job. The Secure Delivery Adapter abstracts the encryption provider, allowing key management strategy to evolve without changing business logic.

Components (118)

User Interface (4)

Service Layer (4)

Data Layer (2)

Infrastructure (2)

Shared Components

These components are reused across multiple features

Service Layer (34)

Data Layer (22)

Infrastructure (38)

infrastructure Keychain/Keystore Adapter low Shared infrastructure JWT Claims Extractor low Shared infrastructure Organization Labels Adapter low Shared infrastructure Keychain/Keystore Adapter low Shared infrastructure Auth API Client medium Shared infrastructure REST API Client medium Shared infrastructure WCAG Accessibility Adapter low Shared infrastructure Registration API Client low Shared infrastructure Accounting API Client high Shared infrastructure PDF Renderer Adapter medium Shared infrastructure File Share Adapter low Shared infrastructure FCM/APNs Adapter high Shared infrastructure Share Sheet Adapter low Shared infrastructure Share Plus Adapter low Shared infrastructure Platform Accessibility Bridge medium Shared infrastructure Semantics Override Adapter high Shared infrastructure URL Launcher Adapter low Shared infrastructure Markdown Content Renderer low Shared infrastructure Network Connectivity Monitor low Shared infrastructure Expense Receipt Storage Adapter low Shared infrastructure Audit Log Writer low Shared infrastructure Feature Flag Checker low Shared infrastructure Logo Upload Adapter low Shared infrastructure Terminology Constants Registry low Shared infrastructure Feature Flag Cache Adapter low Shared infrastructure Org Scope JWT Resolver medium Shared infrastructure Association Audit Logger low Shared infrastructure Token Blocklist medium Shared infrastructure Analytics Tracker low Shared infrastructure SEO Metadata Config low Shared infrastructure Analytics Tracker low Shared infrastructure Analytics Tracker low Shared infrastructure Sales Analytics Tracker low Shared infrastructure Email Provider Adapter low Shared infrastructure Terms of Service Content Provider low Shared infrastructure Legal PDF Asset Provider low Shared infrastructure Consent-Gated Script Loader low Shared infrastructure Legal Page Layout low Shared

User Stories

No user stories have been generated for this feature yet.