PEPFAR MINSANTE

INTRASSAT PROJECT

System Architecture
RIHSS Foundation

How sample-transport and rejection data moves from a field submission to a secured, role-scoped reporting platform — and who is allowed to see what, enforced at every layer, not just in the interface.

01

Data Collection

Field and lab staff record every sample handoff and every rejected sample at the point it happens.

TAVADON Data Collection Tool

Structured digital forms for sample-transport records (VL / EID / TB) and sample-rejection reports, submitted directly from health facilities and transport hubs.

every submission
02

Central Data Store

Every submission is written straight to a structured database — a single source of truth instead of scattered spreadsheets.

SQL Database

Structured, queryable storage for raw transport and rejection records — the authoritative record every downstream report traces back to.

runs every 2 hours
03

Automated Processing Pipeline

A scheduled Python pipeline pulls new records, cleans them, and derives every figure the dashboards depend on — no manual spreadsheet work.

ETL & Analytics Engine

Validates records, computes turnaround time by stage, tallies rejection reasons, and groups facilities by PEPFAR / Non-PEPFAR status.

Mirrored Workbook

A transformed Excel copy is also pushed to SharePoint for offline audit and archival use.

deploy on push
04

Secure Cloud Backend

Every request for data is authenticated and filtered on the server before a single byte is sent.

Authentication & Access API

Session login, self-service request-access with email verification, admin approval queue, and password reset.

Accounts & Sessions

User roles, region/district scopes, per-page permissions and active sessions, in their own dedicated store.

scoped & filtered
05

Reporting & Analytics

The views stakeholders actually use — each one built on data the backend has already scoped to that viewer.

Live Dashboard

Interactive KPIs and charts with per-panel filters.

Fact Sheets

Printable national & district one-pagers, PDF-ready.

Program Views

Routine, Surveillance, Outbreak & Supplies reporting.

role-scoped view
06

Stakeholder Access

One system, four vantage points — everyone signs in the same way and sees exactly their own scope.

National Admin

Full national view, plus user & access management.

National Viewer

All regions, limited to admin-configured pages.

Regional Officer

Data for their region only.

District Officer

Data for their district only.

4
access roles — Admin, National, Regional, District
10
role-scoped pages, individually permissioned per user
2h
refresh cycle — the pipeline runs automatically, around the clock
100%
of data access filtered server-side, not just hidden in the UI