The student portal: eight stages, one private vault, zero public links

The AI modules help a student decide. The portal is where the application actually happens.

Eight stages

Profile assessment, University shortlist, Documents, Application submitted, Offer letter, Tuition & finance, Visa processing, and Visa approved & departure. A counselor moves the student forward and the change appears on the timeline the student sees, with the date and who made it.

A vault, not a folder

• Uploads are stored outside the web root, so no file has a public address.
• Every download goes through a permission check: the student who owns the application, or staff.
• Files are checked by their content, not just their extension, so a disguised script is rejected. The limit is 10 MB, as PDF, JPG, PNG, WEBP, DOC or DOCX.
• A counselor approves each document or asks for a re-upload with a note.

Tested end to end

Before launch we ran the full flow: registration, login by email or phone, uploads, a disguised PHP file being rejected, one student trying to open another student’s file, staff review, and stage updates appearing in the portal.