Sign NDA to Unlock Access to Sensitive Assignment Data
When a peer mentor is about to receive a sensitive assignment (e.g. a home visit for Blindeforbundet involving health records or personal addresses), the system checks whether a valid NDA is on file. If not, the peer mentor is directed to the NDA Signing Screen, which fetches the current agreement template from Supabase Storage, renders it in full, and prompts the peer mentor to scroll through and confirm they have read it. A digital signature or PIN-based confirmation is then captured. Upon successful submission the signed record — including user ID, timestamp, and document version hash — is written to the nda_agreements table and the signature image is stored securely. Access to encrypted assignments is immediately unblocked. This flow is mandatory and cannot be bypassed.
User Story
Acceptance Criteria
- Given a peer mentor without a valid NDA on file attempts to open an encrypted assignment, when the system checks NDA status, then the peer mentor is redirected to the NDA Signing Screen before the assignment content is revealed
- Given the NDA Signing Screen is displayed, when it loads, then the full current NDA agreement text is rendered, fetched from Supabase Storage, with the document version hash visible
- Given the peer mentor has scrolled to the end of the agreement, when they submit a digital signature or PIN confirmation, then the signed record (user_id, timestamp, document_version_hash, signature_storage_reference) is persisted to the nda_agreements table
- Given the NDA has been successfully signed, when the peer mentor navigates back to their assignments, then encrypted assignment content is accessible without further prompting
- Given the NDA signing fails due to a network error, when the error occurs, then the peer mentor sees a clear error message and can retry without losing their progress
- Given the NDA Signing Screen is used by a peer mentor with accessibility needs, when VoiceOver or a screen reader is active, then all text, labels, and interactive controls are fully accessible with appropriate semantic labels
Business Value
NDA compliance is legally and ethically mandatory for organisations whose peer mentors may be entrusted with sensitive health records, home addresses, and personal data. Without a digital NDA process, organisations rely on paper forms that are difficult to audit and may not be on file during an incident investigation. Digitising this flow enforces compliance at the point of access — the system cannot expose sensitive assignments to peer mentors who have not signed — eliminating paper management overhead and enabling real-time audit trails.
Components
- NDA Signing Screen ui
- NDA Validation Service service
- NDA Repository data
- Document Signing Infrastructure infrastructure