ITKIT
Sovereign government technology
One platform for the services a state runs on
Twenty products in six families, from the problem to how we solve it.
October 2026
Interactive prototypes · synthetic data only
The problem
Today the state works in silos, on paper and inside black boxes
Proving who you are, again and again
Every service repeats an in-person identity check, and every ministry keeps its own logins.
Paper and queues at every counter
Forms, signatures, archives and border declarations still live on paper, so people wait.
Systems that cannot talk
Each entity builds its own forms, workflows and payments. Records stay inside one building.
Decisions nobody can trace
Logic sits in vendor firmware and black-box scores. No one can say who decided, or why.
ITKIT
The problem
The problem
Where it hurts, domain by domain
Identity and services
A national portal digitises only the front door while ministries still work on paper.
Civil records
Many people lost documents through displacement, and the register holds duplicates.
Justice
Cases are tracked on paper and spreadsheets, and digital evidence has no provable integrity.
Health
Results stay inside each facility, so patients carry paper files between doctors.
Customs
A tariff change reaches some ports days after others, and statistics come from spreadsheets.
Airports and roads
At peak hours every traveller waits for an officer, and toll plazas stop every car.
ITKIT
The problem
Our answer
One sovereign platform. Twenty products. People decide.
Build identity, integration, workflow and audit once. Run every product on them, in the country’s own data centres, in Arabic and English.
The platform
Four layers under every product
Channels
Where people meet the state
Citizen app · Web portals · Officer workspaces · Kiosks and e-gates · Partner APIs
Products
Each owns its domain and data
20 products: Identity and government 4 · Justice 1 · Health 1 · Customs 9 · Airports and roads 4 · AI 1
Shared services
Built once, used by all
OneID trust services · ITKIT ESP integration · Elsa workflows and rules · Quartz.NET scheduling · Audit and observability
Sovereign infrastructure
In the country’s own data centres
Kubernetes on-premises · PostgreSQL · Valkey · Apache Kafka · HSM and national PKI · SIEM and SOC · DR site
ITKIT
Our answer
Our answer
Six principles every product follows
People decide. Systems advise.
Every legal decision is taken by a named person, with a recorded reason.
Data stays with its owner
Ministries keep their databases and exchange through governed contracts, not a data lake.
Sovereign by default
Everything runs in national data centres; signing keys stay in the country’s HSMs.
Government data is never sold
No monetising of citizen data, and no surveillance or profiling tools.
Arabic first, bilingual always
Every screen is designed right-to-left in Arabic and left-to-right in English from day one.
Open standards, no lock-in
OpenID Connect, FIDO2, HL7 FHIR, the WCO Data Model, ICAO 9303. Data leaves in standard formats.
ITKIT
Our answer
Our answer
One open technology stack
| Layer | Technology | Why it matters |
|---|---|---|
| Services | ASP.NET Core on .NET 11 | .NET 10 LTS is the fallback until .NET 11 is approved for production. |
| Web and mobile | Angular 22 | One component library; Arabic and English from the same code. |
| Data | PostgreSQL | Each domain owns its database. No shared government data lake. |
| Events | Apache Kafka | Business events between products, replayable and audited. |
| Workflow | Elsa Workflows | Long-running processes with tasks that wait for a named officer. |
| Integration | ITKIT ESP | API gateway, schema registry and adapters for legacy systems. |
| Runtime | Kubernetes on-premises | Runs in national data centres, with a DR site. |
| Keys and trust | HSM and national PKI | Signing keys never leave the hardware security module. |
| Security operations | SIEM and SOC | Every product streams audit and security events to the national SOC. |
ITKIT · Also in the stack: Valkey for sessions and caching, Quartz.NET for scheduling
Our answer
How the products work together
A new baby: one request instead of three offices
1
The hospital reports the birth
Most details arrive already filled in.
Birth notice · OneRegistry
2
Hala signs in once
A passkey on her phone, no password.
OneID
3
One request, one payment
She sees which office receives which record.
OneService
4
An officer decides
The system flags a cropped photo; Rami decides, and it is logged.
OneGov workspace
5
A signed certificate
Sealed by the Civil Registry. Anyone can verify it; a withdrawn one shows as revoked.
OneRegistry · OneID seal
People without a smartphone are served at the counter, with their own consent and the same record.
ITKIT · Names and data are synthetic
Our answer
The portfolio
Twenty products in six families
Identity and government · 4
OneID · OneService + OneGov · OneRegistry · OneCensus
Justice · 1
OneJustice
Health · 1
OneHealth
Customs · 9
Customs HQ · Port Operations · Tariff · Declare · Declare app · Kiosk and Officer app · Bank Verify · Admin · Smart Transit
Airports and roads · 4
iCheck · iGates · iBoard · iToll
Artificial intelligence · 1
ITKIT Anomaly Detection
ITKIT
The portfolio
Identity and government · 01
OneID
National digital identity and trust
The problem
People repeat in-person identity checks for every service.
Each ministry runs its own login and password store.
Paper signatures slow approvals and cannot be verified remotely.
Built to: NIST SP 800-63-4 · FIDO2 / WebAuthn · OpenID Connect · W3C Verifiable Credentials
How it solves it. Prove who you are once with a passkey, sign with legal effect, and share only what a service needs. The civil registry stays the authority on who a person is.
ITKIT · Prototype screens, synthetic data
01 / 20
Identity and government · 02
OneService + OneGov
Government services and ministry modernisation
The problem
A portal digitises only the front door if ministries still work on paper.
Every entity builds its own forms, workflows and payment code.
Infrastructure is sized and secured differently in every building.
Built to: World Bank GovTech Maturity Index · X-Road data-exchange principles
How it solves it. One front door for citizens and businesses, and a repeatable method to modernise each ministry behind it: applications, data, integrations, infrastructure and operations.
ITKIT · Prototype screens, synthetic data
02 / 20
Identity and government · 03
OneRegistry
Civil registration and identity documents
The problem
Historical records sit on paper in many offices.
Duplicates and errors are fixed silently, or not at all.
People abroad struggle to register life events.
Built to: World Bank ID4D principles · UN civil registration and vital statistics guidance · ICAO Doc 9303 / PKD
How it solves it. Complete, correct civil records with visible provenance: births and deaths, family links, digitised archives, and links to smart ID and ePassport issuance.
ITKIT · Prototype screens, synthetic data
03 / 20
Identity and government · 04
OneCensus
Registration events, household records and smart ID
The problem
Many people lost their documents through displacement.
Families are split across governorates, camps and borders.
The population register is out of date and holds duplicates.
Built to: UN census principles (Rev. 3) · UN CRVS guidance · World Bank ID4D · ISO/IEC 19794 / 39794
How it solves it. People pre-register online, are verified and captured at planned events in centres or by mobile teams, and leave with a smart ID card and a digital ID.
ITKIT · Prototype screens, synthetic data
04 / 20
Justice · 05
OneJustice
Lawful investigation and case management
The problem
Case tracking is fragmented across paper and spreadsheets.
Digital evidence lacks provable integrity.
Referrals between institutions are slow and hard to audit.
Built to: UNODC goCASE (functional benchmark) · digital evidence hashing and chain-of-custody practice
How it solves it. Controlled case files from incident to closure, with hashed digital evidence, chain of custody, and lawful exchange between police, prosecution, courts and laboratories.
ITKIT · Prototype screens, synthetic data
05 / 20
Health · 06
OneHealth
National digital health and record exchange
The problem
Results and histories stay inside each facility.
Patients carry paper files between doctors.
Facilities use different systems and codes.
Built to: HL7 FHIR / SMART on FHIR · HL7 v2 · DICOM / DICOMweb · WHO digital health guidance
How it solves it. One patient record across hospitals, clinics, labs, radiology and pharmacies, with a patient app, and clinical access governed by consent, purpose and audit.
ITKIT · Prototype screens, synthetic data
06 / 20
Customs · nine products
A customs authority, end to end
1 · Set the rules
Customs HQ
Customs Tariff
2 · Declare
Customs Declare
Declare app
Kiosk
3 · Verify
Bank Verify
Anomaly Detection
4 · Control
Port Operations
Officer app
5 · Move
Smart Transit
Customs Admin governs all of it: institutions, users, roles, rule thresholds and a full audit log, with a second person on every change.
ITKIT
The portfolio · Customs
Customs · 07
Customs HQ
National tariff, declarations and policy for every port
The problem
A tariff change reaches some ports days after others.
Decrees and trade measures are typed in by hand, with no second check.
National statistics are assembled from port spreadsheets.
Built to: Harmonized System 2022 → 2028 · WCO Data Model 4.3 · Revised Kyoto Convention · WCO SAFE 2025
How it solves it. HS codes, the tariff, trade measures and legal instruments in one place. Approved changes go out as signed policy packages that every port acknowledges, with an offline fallback.
ITKIT · Prototype screens, synthetic data
07 / 20
Customs · 08
Port Operations
Officer tools for air, land and sea ports
The problem
Officers retype manifests and declarations at the desk.
Scanner images and inspections are not linked to the declaration.
When the network drops, the port falls back to paper.
Built to: WCO Data Model 4.3 · WCO SAFE 2025 · Revised Kyoto Convention · ISO 6346 container IDs
How it solves it. One working system from arrival to exit: manifests, clearance, scanner lanes, inspection, seizures, cash control and the gate. It keeps working offline on the last valid policy package.
ITKIT · Prototype screens, synthetic data
08 / 20
Customs · 09
Customs Tariff
Public HS tariff search and landed-cost estimate
The problem
Traders learn the real duty only when the declaration is assessed.
Anti-dumping duties, bans and permits are spread across decrees.
Brokers guess HS codes from old tables, and errors become disputes.
Built to: HS 2022 · HS 2028 correlation · WTO Trade Facilitation Agreement, Art. 1 · WCAG 2.2 AA
How it solves it. Anyone can search by product, HS code or CAS number, see the duty, taxes and measures on a line, and estimate the landed cost before goods ship. No sign-in needed.
ITKIT · Prototype screens, synthetic data
09 / 20
Customs · 10
Customs Declare
Cash and gold declarations for travellers and companies
The problem
Travellers fill in paper forms at the border, hard to check later.
Banks and airlines cannot confirm a declaration without calling customs.
Companies repeat the same paperwork for every trip.
Built to: FATF Recommendation 32 · WCO Data Model 4.3 · ISO 4217 · ISO/IEC 18004 (QR) · WCAG 2.2 AA
How it solves it. Declare cash, gold and valuables online before reaching the border, as a guest or with OneID, and receive a QR border pass. Anyone can verify its status with its number.
ITKIT · Prototype screens, synthetic data
10 / 20
Customs · 11
Customs Declare app
Declare cash and gold from your phone before travel
The problem
Border halls have weak coverage, so online-only passes fail.
Travellers learn a declaration is needed only at the border.
Managers cannot see where a cash-in-transit run is.
Built to: FATF Recommendation 32 · Apple and Google Wallet passes · OWASP MASVS · WCAG 2.2 AA
How it solves it. The same declarations on iOS and Android, in Arabic and English, with a pass that works offline in the phone wallet. Companies see their fleet and cash-in-transit runs in one place.
ITKIT · Prototype screens, synthetic data
11 / 20
Customs · 12
Customs Kiosk and Officer app
Self-service kiosks and a floor app for officers
The problem
Travellers who did not declare online have only a queue left.
Officers on the floor carry paper lists and radio the office.
Checks in the hall are not recorded against the declaration.
Built to: ICAO Doc 9303 · FATF Recommendation 32 · WCAG 2.2 AA and EN 301 549 · OWASP MASVS
How it solves it. Hall kiosks let travellers declare, scan a passport and get a pass. Officers look up any pass on a phone, record the check, and see the anomaly score with its reasons.
ITKIT · Prototype screens, synthetic data
12 / 20
Customs · 13
Customs Bank Verify
Source-of-funds checks for banks and exchange houses
The problem
Officers phone banks to check a withdrawal slip.
Forged exchange receipts are hard to spot at the border.
Banks get requests by email, with no record of the answer.
Built to: FATF Recommendations (AML/CFT) · FATF Recommendation 32 · WCO Data Model 4.3
How it solves it. Banks, exchange houses and transfer companies confirm slips, transfers and receipts in a secure portal. Each answer is Match, Mismatch, Not found or Suspicious, and it is recorded.
ITKIT · Prototype screens, synthetic data
13 / 20
Customs · 14
Customs Admin
Institutions, users, rules and audit for customs
The problem
Accounts of staff who changed post stay active.
Rule thresholds are changed by IT without a business sign-off.
No one can say who changed what, and when.
Built to: ISO/IEC 27001 Annex A (design reference) · NIST SP 800-63-4 · OpenID Connect
How it solves it. Institutions, users, roles, delegations, workflows, rule settings and integrations in one portal. Every change needs a maker and a checker, and lands in a full audit log.
ITKIT · Prototype screens, synthetic data
14 / 20
Customs · 15
Smart Transit
Fleet, e-seals, cold chain and corridor exchange
The problem
Perishable trucks queue at borders with no slot and no advance data.
A cut seal is found at the destination, hours later.
Neighbours cannot verify each other’s seals or inspections.
Built to: WCO Data Model 4.3 · WCO SAFE 2025 · AEO and MRAs · UNECE eTIR · IPPC ePhyto
How it solves it. Track trucks, e-seals and reefer temperatures from loading to release, and share signed evidence with neighbouring authorities under agreement. Each country keeps its own decision.
ITKIT · Prototype screens, synthetic data
15 / 20
Airports and roads · four products
Four gates on one core
iCheck
Check in and drop the bag at a shared kiosk
iGates
Pass passport control at an e-gate
iBoard
Board at the aircraft door, counted live
iToll
Drive through a toll gantry without stopping
One workflow per passage
Each passage runs as an Elsa workflow the authority can inspect and change.
A person handles exceptions
The gate never refuses entry; an unsure case goes to a named officer.
Open standards
ICAO 9303, IATA CUSS and BCBP, ISO 17573: no vendor firmware lock-in.
ITKIT
The portfolio · Airports and roads
Airports and roads · 16
iCheck
Self check-in and bag drop at shared stations
The problem
Queues build while other airlines’ desks stand empty.
Bags are treated as accepted before the baggage system confirms them.
Each airline brings its own kiosks, so stations cannot be shared.
Built to: IATA CUSS · IATA BCBP (Res. 792) · IATA RP 1745 · ICAO Doc 9303
How it solves it. One kiosk serves every participating airline: scan the passport, weigh and tag the bag, and leave only when the baggage system has confirmed it.
ITKIT · Prototype screens, synthetic data · Demo Air is fictional
16 / 20
Airports and roads · 17
iGates
Passport e-gates with officer exceptions
The problem
At peak hours every traveller waits for a desk officer.
Gate logic sits in vendor firmware the authority cannot inspect.
When a gate is unsure, nobody records who decided and why.
Built to: ICAO Doc 9303 and PKD · ISO/IEC 30107-3 · ISO/IEC 39794-5 · OpenID Connect
How it solves it. Each passage is an Elsa workflow: read the passport, match the face, apply the border authority’s rules, then open the gate or hand the traveller to an officer.
ITKIT · Prototype screens, synthetic data
17 / 20
Airports and roads · 18
iBoard
Boarding-pass reader and live headcount at the door
The problem
Gate agents count passengers by hand before the door can close.
Passengers reach the wrong aircraft and are found late.
Bags of no-show passengers are traced late and delay departure.
Built to: IATA BCBP (Res. 792) · IATA RP 1745 · IATA Res. 753 · WCAG 2.2 AA
How it solves it. A reader at the door checks each pass against flight, gate, group and the exit record, and shows green, amber or red. The agent tablet keeps the headcount and flags bags to offload.
ITKIT · Prototype screens, synthetic data
18 / 20
Airports and roads · 19
iToll
Free-flow highway tolling with a driver app
The problem
Toll plazas make every car and truck stop and queue.
Drivers learn about charges and low balances too late.
A misread plate becomes a fine with no simple way to dispute it.
Built to: ISO 17573 · ISO 14906 · PCI DSS through the payment provider · WCAG 2.2 AA
How it solves it. Gantries read a tag or plate at full speed, and the driver app shows the charge within seconds. Unread plates and disputes go to a person before anything is billed.
ITKIT · Prototype screens, synthetic data · amounts illustrative
19 / 20
Artificial intelligence · 20
ITKIT Anomaly Detection
Explainable scoring for customs and beyond
The problem
Under-valuation and origin fraud hide among clean declarations.
Black-box scores cannot be explained to an officer or a court.
Thresholds change without testing on past data.
Built to: WCO Customs Risk Management Compendium · FATF Recommendations · WCO Data Model 4.3
How it solves it. Scores declarations, cash movements and transactions, and shows the factors behind every score. It connects to any system through ITKIT ESP and Kafka, and never acts on its own.
ITKIT · Prototype screens, synthetic data
20 / 20
How we build
Built to international standards
Identity and trust
NIST SP 800-63-4 · FIDO2 / WebAuthn · OpenID Connect · W3C Verifiable Credentials · World Bank ID4D
Health and justice
HL7 FHIR · DICOM · WHO digital health guidance · UNODC goCASE benchmark
Customs and trade
Harmonized System · WCO Data Model 4.3 · WCO SAFE · Revised Kyoto · UNECE eTIR · FATF R.32
Travel and roads
ICAO Doc 9303 and PKD · IATA CUSS and BCBP · ISO/IEC 30107-3 · ISO 17573
Security
ISO/IEC 27001 controls · NIST CSF 2.0 · CIS Controls v8 · OWASP ASVS and MASVS
Accessibility
WCAG 2.2 AA · EN 301 549 for kiosks · Arabic right-to-left as the first design language
We align with these standards. Certification is issued by accredited bodies, not by ITKIT, and none is claimed today.
ITKIT
How we build
How we build
What our systems will never do
Decide in place of a person
No score holds, seizes, refuses entry or bills anyone. A named person decides and records why.
Watch people
No mass surveillance, political profiling or bulk biometric identification. Face images are discarded after matching.
Sell or pool data
Government and citizen data is never sold, and no central data lake is built behind ministries’ backs.
Change silently
No record is merged, no rule or role changed, without a second person and an audit entry.
ITKIT
How we build
How delivery works
Start small, prove it, then scale and hand over
6–10 weeks
Assess
Map what already exists and decide, system by system: reuse, integrate, modernise or build.
4–6 months
Pilot
One product, one authority, real users and a measured outcome, on the client’s own infrastructure.
12–24 months
Scale
Roll out by region and service, adding products that share identity, integration and audit.
Agreed per contract
Operate and transfer
We run it with your team, train them, then hand over operations, code escrow and keys.
Every engagement starts with what already exists: reuse, integrate, modernise, or build, in that order.
ITKIT · Durations are typical ranges, fixed per contract
How delivery works
Beyond the products
Three services around the platform
Consulting
Digital strategy, current-state assessment, enterprise architecture with TOGAF, procurement support and programme assurance.
TOGAF · GovTech Maturity Index · PRINCE2 · ITIL 4
Cybersecurity
Assessments, authorised penetration testing, SOC design and 24×7 monitoring, PKI and HSM, incident readiness.
ISO/IEC 27001 · NIST CSF 2.0 · MITRE ATT&CK
Managed services
We run critical systems in your data centres under clear service levels, then transfer operations to your team.
ITIL 4 · SRE runbooks · Kubernetes
ITKIT
Beyond the products
Where we are today
Everything in this deck can be clicked through
20
interactive prototypes, one per product
2
languages on every screen: Arabic and English
40
narrated product films, 20 in each language
20
product documents with help for every screen
All data in the prototypes is synthetic. Names, cases and amounts are invented for demonstration, and no client, contract or certification is claimed.
ITKIT · Prototypes, films and documents are linked from the ITKIT website
Where we are today
Next step
Choose one authority and one pilot
Walk through the prototype with us, agree the outcome to measure, and start the assessment.
1 · Demo
A guided session on the prototypes that matter to you
2 · Assess
6–10 weeks to map what exists and fix the pilot scope
3 · Pilot
4–6 months with real users and a measured result
ITKIT · [contact name, email and phone]
Thank you