# Super Admin dashboard and optional OCR

Sign in with the existing Platform Super Admin account and open `/platform`.

The overview shows total tenants, accessible tenants (active workspace plus active/trial unexpired subscription), attention items (suspended, missing or expiring subscriptions), and enabled company accounts. Directory filters support company name/slug, workspace access, subscription status, plan and OCR availability. All counts come from the database; no sample companies are added to the working database.

Open **Manage** beside a tenant to edit its name/timezone, manage subscription and module access, review account/MFA enrollment, and view recent administration activity. Suspending a workspace requires an explicit confirmation and blocks company requests, including existing sessions, on their next request. Reactivation still respects subscription and module restrictions. Suspension retains records.

## OCR is disabled by default

Migration `2026_10_17_000010_add_tenant_ocr_control` adds `tenants.ocr_enabled` with a database default of false. Existing and newly created tenants start with OCR disabled. It alters the existing InnoDB table without adding another storage engine or changing database credentials.

Only an authenticated Platform Super Admin may change this flag: **Manage tenant > OCR assistance > OCR availability > Save OCR setting**. Tenant administrators cannot enable OCR themselves. The switch is tenant-specific and audited.

When disabled, extraction buttons and suggestion links disappear, direct extraction requests are denied, and the OCR service rejects extraction before reading document bytes or starting a provider. Previously saved encrypted suggestions remain retained but hidden. A disable that occurs during extraction also prevents the final save. Re-enabling allows optional extraction again; it never automatically verifies dates.

**Document vault > Open document > Human metadata verification** remains available. Enter the reference, issue date and expiry date, then confirm reviewed metadata. The latest uploaded file must pass antivirus scanning. Encryption, previews, downloads, legal holds, renewals and expiry reminders continue independently of OCR.

The active Docker-free provider is native Tesseract in a restricted Linux sandbox on the Laravel server; see [Tesseract guide](TESSERACT_OCR.md). Mobile and Mac browsers do not need an OCR engine. Moving the server to another operating system requires an appropriate provider only if OCR is enabled. Malware scanning and encryption still require their own configured providers; this change does not bypass those controls.

No cloud, Cloudflare, external mail delivery or public DNS configuration is introduced. Existing accounts and MFA are preserved.

## Verification

Automated coverage is in `PlatformDashboardTest`, the OCR/manual-date cases in `PhaseTwoTest`, the InnoDB `StorageEngineTest`, and `tests/browser/platform.spec.js`. Browser fixtures use a separate SQLite database; application tables remain on MySQL/InnoDB. The previous release audit remains a dated record; this guide describes the later dashboard/OCR change.

Final acceptance: **234 MySQL tests / 970 assertions passed**, the document browser workflow passed, and the new Super Admin browser workflow passed on desktop/mobile without horizontal page overflow. Vite build, PHP formatting and Blade compilation passed. Local login, health and readiness returned HTTP 200. See `SUPER_ADMIN_VERIFICATION.json` and `SUPER_ADMIN_STORAGE_VERIFICATION.json`.