Enterprise Non-Emergency Medical Transportation platform covering trip lifecycle, dispatch, and multi-role access with JWT auth and RBAC.
Challenge
ActiveRoute’s operators juggled spreadsheets, phone trees, and a brittle legacy tool that could not enforce role boundaries. Dispatchers needed live trip status, admins needed audits, and drivers needed a simple view - without exposing the full ops stack to every role.
Approach
- 01
Modeled trip state workflows and least-privilege roles before building UI surfaces.
- 02
Shipped a React ops console on a Node/Express API with JWT sessions and MongoDB trip entities.
- 03
Hardened RBAC so dispatch, admin, and operator views only exposed allowed actions.
- 04
Added calendar and dashboard views so daily coordination stayed in one system of record.
Results
- Average trip coordination time dropped about 45% versus the spreadsheet baseline.
- Unauthorized action attempts fell to near zero after RBAC cutover.
- Dispatchers adopted the calendar view as the daily source of truth within two weeks.
