Personora — AI-Ready Institutional HR Platform, Built End to End

Context

Personora is a reference build — a complete, production-grade HR platform we engineered to demonstrate how Inovativi designs software and ships AI, not a confidential client deployment. We set ourselves the brief a prospective public-sector client would set: an ambiguous personnel domain, real security constraints, and AI that has to be useful and governed rather than decorative. The live demo runs entirely on dummy data, with sign-in as recruiter, hr.manager or admin.

Problem

Public-sector HR software is often a tangle of legacy code: hardcoded credentials, unaudited access to sensitive personal data, and brittle business rules around leave, contracts and recruitment. We rebuilt the category from first principles to answer one question for prospective clients — can Inovativi deliver complex, secure, AI-ready software? — without resorting to a slideware prototype.

What was built / modernized

Personora is a real system with real domain logic. People and recruitment run on an enforced state machine (vacancies → advertisements → applications) with weighted committee scoring and one-click conversion of an accepted applicant into an employee. Employment history is append-only — transfers, promotions and salary changes never overwrite the past — with automatic contract-expiry alerts. Leave is a genuine policy engine: monthly accrual, experience bonuses, capped carry-over, medical allocation and a full approval workflow with revision chains that never destroy history. Timesheets, appraisals, documents and reports round it out with payroll-ready summaries, immutable approved appraisals, per-category document access and CSV exports. Woven through it is a governed multi-provider AI layer behind one clean abstraction, and every sensitive read, download, export and login is recorded.

Workflow highlights

• One person, many roles; vacancies → advertisements → applications through an enforced state machine
• Weighted committee scoring and one-click conversion of an accepted applicant into an employee
• Append-only employment history with automatic contract-expiry alerts
• A real leave-policy engine: monthly accrual, experience bonuses, capped carry-over, medical allocation and full approval workflow
• Timesheets, immutable approved appraisals, per-category document access, payroll-ready summaries and CSV exports
• AI-generated, committee-facing summaries of job applicants from structured registry data

Security, auditability & governance

• The AI only ever sees non-restricted fields — national ID numbers and dates of birth are deliberately excluded
• The model is instructed to summarize strictly from the data and never to invent
• Every AI generation writes a SensitiveRead audit row; the endpoint is rate-limited to control cost
• No secrets in source control; least-privilege access to sensitive data behind audited endpoints
• Integrity enforced in the database — unique constraints, soft deletes, append-only history and decimal money
• Per-IP login rate limiting and an optional scheduled reset that keeps the public sandbox clean

AI-ready extension points

• Policy-aware leave and contract assistant that answers employee questions strictly within their permissions
• Document drafting for contracts, decisions and HR letters from structured registry fields, with human approval
• Appraisal-summary and review-cycle drafting from immutable appraisal data
• Natural-language reporting — ask for a payroll or headcount summary and get a grounded, exportable answer
• Recruitment screening assistant that ranks and explains shortlists against weighted committee criteria
• Anomaly and audit-trail assistant that surfaces unusual sensitive-access patterns for review

Value delivered

• Demonstrates that Inovativi can deliver complex, secure, AI-ready software end to end — from ambiguous domain to a tested, deployable system
• A swappable, governed, cost-controlled AI seam with no vendor lock-in — the same pattern we'd bring to a client's product
• Security by design: no secrets in source control, audited sensitive access and database-enforced integrity
• 70+ automated tests covering the hard parts — leave arithmetic, recruitment scoring, employment-history preservation and document access control

Technologies

Relevant roles