BaseOps by KOL.XYZ LLC

One base.
Every field operation.

BaseOps is the shared foundation underneath our workforce platforms — identity, organizations, permissions and configuration, built once and trusted by every product on top of it. Products focus on the work. The base handles who you are, what you may do, and how everything is set up.

EEID  one lifelong identity per person OAuth 2.0 / OIDC  the base is the identity provider Multi-credential  SMS · password · Google · Passkey
The Platform

One base, two systems

Every product in the family is built on the same base, so a worker, a crew lead and an administrator sign in once and are recognized everywhere — with the same identity, the same permissions model and the same design standard.

THE BASE

BaseOps

The foundation layer. It owns everything products should never rebuild:

  • Accounts & lifelong EEID identity
  • Sign-in & sessions (OAuth 2.0 / OIDC)
  • Organizations, roles & permissions
  • Platform configuration & audit
BUILT ON BASEOPS

ArriveOps

The workforce operations system: getting the right people to the right site, and paying them correctly.

  • Dispatch & crew assignments
  • Hours, timesheets & approvals
  • Reimbursements & pay
  • Travel, housing & ride groups
BUILT ON BASEOPS

CablingOps

The site project system for structured cabling, managing the full lifecycle of data center build-outs.

  • Work orders & process templates
  • Cable, label & material tracking
  • Field reporting & quality checks
  • Progress & exception boards
Capabilities

Designed once, in the base

Hard problems — identity, access control, sign-in policy — are solved a single time in BaseOps, not patched separately into every product.

🪪

Lifelong EEID

Every person gets one permanent employee identity that never changes across products, projects or employers on the platform.

🔑

Every credential, one account

SMS code, password, Google, Passkey and email code for sign-in — plus TOTP for administrators. Binding a new credential always verifies the person first.

🛡️

Permissions that hold

Default-deny permission points, role inheritance with high-risk exceptions, expiring temporary grants, and no self-escalation — enforced server-side.

📶

Sign-in policies per product

Site phones often have Wi-Fi but no cell signal, so each product and organization chooses its preferred sign-in order — password-first or code-first.

⚙️

Configuration center

Platform-level settings live in the base and apply everywhere; product back offices keep only their own business settings.

🧾

Audit by default

Sign-ins, grants, claims and administrative actions are written to an append-only audit trail as they happen.

Architecture

How it fits together

Products integrate through one small client package and never touch identity data directly. Business data — projects, sites, work orders — always stays in the product, never in the base.

ProductsArriveOps · CablingOps · future systems — each owns its business data
▼
@baseops/clientOne integration package: PKCE sign-in, token verification, permission snapshots
▼
BaseOps servicesIdentity · Organizations · Permissions · Configuration · Audit
▼
DataIdentity & configuration data only — no project or site master data
Built to extend

A base made for more than one company

BaseOps is designed so partner organizations can eventually build on the same foundation — shared identity, the same two field systems, and one permission model — without giving up their own business data or their own brand on site. If you run field crews and want that conversation, we should talk.

info@kol.xyz