The boring parts, done properly.
Provisioning, reorganizations, seats, masters, audit, configuration — the plumbing that decides whether a platform is trustworthy at year three. Dexor treats it as a first-class product.
Onboard an org without lockouts or orphans.
Platform admins can provision users on a tenant’s behalf; tenant admins self-serve — create, suspend, reactivate, reset passwords, move users. Every create validates that the manager chain terminates at a BU-head root before the login exists, and rolls back on failure. A last-active-admin guard makes self-lockout impossible.
- Create rep · chain → BU-head rootvalidated before login existscreated
- Suspend userreversiblesuspended
- Remove last active adminlast-active-admin guardblocked
Reorganize without breaking history.
Re-parent a user to a new manager and the recomputed manager chain cascades to every descendant in one atomic, audited operation. Leaf moves sync seats and role groups too. No orphaned subtrees, no merged trees, no misattributed reports.
Licenses that enforce themselves.
Per-role seat caps — rep, manager, admin, distributor — allotted by the platform. Every create, reactivate, and role move is seat-gated, and admins see live “X of Y” usage. Contracted headcount stays contracted.
A clean, coded master for everything.
Doctors and chemists with auto-generated faceted codes and per-customer visit-frequency targets; bulk import up to 1,000 per call; distributor, outlet, and SKU-crosswalk masters; and a guarded admin surface for products, territories, targets, assignments, areas, and outlets — with server-owned keys the client can never inject.
- Doctors · faceted codes+ visit-frequency targetscoded
- Bulk importup to 1,000 / callbatch
- SKU crosswalk mastercanonical
A geographic backbone with no orphans.
A canonical region → province → city hierarchy with referential integrity, plus tenant-defined areas and their contact points — the clean foundation for territory realignment and geo-analytics.
Alerts that survive the session.
A durable per-user inbox that delivers even when location features are off, device push on mobile, and live AI notices over WebSocket — dismissible, and pushed only to people entitled to see them.
- ✦ Notice · Lahore-North at risklive
- Task · verify Ahmed R. selfietask
- Delivered with location offdurable
Accountability that cannot be switched off.
One audit writer records every mutation — provisioning, targets, org moves, match decisions, geography, settings, even PII reads — with a frozen six-field body. If the audit channel is unavailable, control-plane routes fail closed before writing anything; data and audit commit atomically. De-identified CSV export (SHA-256-hashed IDs) for admins.
- org.move · actor #A12data + audit atomiclogged
- pii.read · actor #A12logged
- audit channel down → routefails closed
Export: de-identified CSV · SHA-256-hashed IDs.
Every tenant tuned to its own policy.
Photo-required lever, encryption key, faceted-code templates, timezone, image retention, location mode (off / mandatory / opt-in), tour-planning depth, AI budgets, document-export pools, per-role seats, and active/suspended status — with guards so pools can never be over-allocated.
- Location modeopt-in
- Photo requiredon
- TimezoneAsia/Karachi
- AI pool over-allocationguarded
Also on the platform
- Cross-tenant health dashboard for the vendor console (MFA-protected)
- Per-tenant AI configuration
- Marketing CMS
- Spam-protected public lead capture with instant sales alerts and audited, super-admin-only access
Security
Structural tenant isolation, separated identity pools with MFA, and a fail-closed tamper-evident audit trail.
SecurityDexor intelligence
Grounded AI, zero-cost deterministic insights, weekly executive summaries, and margin-safe Compute Credits.
Dexor intelligence