Web application
The AVERASE web application is the command center for your erasure operation — the place where accounts, ISO downloads, asset inventory, wipe reports, certificates, your team, and third-party integrations all live. Every kiosk boot and every wipe reports back here, so the web app is always the single source of truth for what happened to which drive.
What lives here
- Dashboard — KPI tiles, 30-day charts, team presence, and a live activity feed. See Dashboard.
- Inventory — one row per physical machine your kiosks have ever booted, with the complete hardware fingerprint behind each row. See Inventory.
- Wipes — every wipe result, with its certificate. This page is also the certificate listing — there is no separate certificates index. See Wipe reports.
- Downloads — where account admins download the bootable ISOs and control the device tokens they mint. See Downloads.
- Settings — profile, password, two-factor, accounts and members, API tokens, integrations, and webhooks. See Settings.
- Integrations — push assets and wipe results into external systems such as RazorERP. See Integrations.
Navigation shell
Signed in, the app runs inside a persistent left sidebar with four destinations:
| Sidebar item | Route | Who sees it |
|---|---|---|
| Dashboard | /dashboard | Everyone |
| Inventory | /inventory | Everyone |
| Wipes | /wipes | Everyone |
| Download | /downloads | Account admins only |
The sidebar collapses to an icon-only rail, and the notifications bell sits in its header. Everything else lives in the profile menu at the bottom of the sidebar: Settings, Profile, Users, Integrations, API keys, Terms, Privacy, Changelog, and Sign Out. A few rows (Personalization, Data Use, Help, Docs) are placeholders for upcoming pages.
Opening any settings page adds a second, narrower sidebar — the settings sub-sidebar — with three groups:
- Account — Profile, Password, Connected Accounts
- Organization — Accounts (and Billing, when payments are enabled)
- Developer — API, Integrations, Webhooks (visible to account admins only)
Roles: admin vs member
admin is the only explicit role; every other member of an account is implicitly a member. The account owner is always an admin — the owner's admin checkbox is disabled with the note that the role cannot be removed for the account owner.
| Capability | Member | Admin |
|---|---|---|
| Dashboard, Inventory, Wipes | Yes | Yes |
| View and download certificates | Yes | Yes |
| Changelog and notifications | Yes | Yes |
| Own profile, password, two-factor | Yes | Yes |
Download ISOs / mint device tokens (/downloads) | No | Yes |
| Revoke, suspend, reinstate device tokens | No | Yes |
API tokens (/api_tokens) | No | Yes |
Integrations (/integrations) | No | Yes |
Webhooks (/webhooks) | No | Yes |
| Create/edit accounts, invite members, transfer ownership | No | Yes |
| Subscription page | No | Yes |
A member who visits an admin-only page is redirected with "Only account admins are allowed to do that."
Signing up and inviting people
Sign-up is invitation-only. Creating an account requires a valid invitation token; without one, the sign-up form responds with "Sign-ups are by invitation only. Ask an account admin to invite you."
Admins invite people from an account's page (Invite A User). The recipient gets an email — "{inviter} invited you to {account}" — with a "Join {account}" link and Accept/Decline actions. Pending invitations show on the account page with an "Awaiting response" badge and Resend, Copy link, and Edit controls.
Personal and team accounts
Every user has a personal account, and can belong to any number of team accounts. Signing up creates a team account named "{name}'s Team". The /accounts page lists every account you belong to — avatar, a Personal badge where applicable, member count, and a Switch button (or a Current Account badge for the one you're in). All data — assets, wipes, certificates, tokens, integrations — is scoped to the account you're currently switched into.
An account's page shows its member table (each user with avatar, a "(you)" marker, and a two-factor shield when 2FA is enabled), email, roles, and — for admins — an Edit action per member. Admins can also transfer ownership, which asks "Are you sure you want to transfer this account?"
Billing is not currently enabled — no payment processors are configured and the Billing navigation is hidden. Subscription gating (ISO downloads require an active subscription) is built and will apply once billing is turned on.
Notifications and the changelog
Two feeds keep you current:
- Notifications (
/notifications) — your whole inbox across all your accounts, 25 per page, with live inserts as events arrive and a "Mark all as read" action. The bell in the sidebar header shows the latest 3 notifications for the current account. Example notifications: "{user} accepted your invitation." and "Wipe completed on drive {serial}." - Changelog (
/changelog) — published product announcements from MAESON Technologies. Reachable from the profile menu; visiting it clears the unread marker.