Managed cloud infrastructure. Real-time operations. A clear path to enterprise controls.
TurnQ is a responsive progressive web application built with standards-based web technology and Google Firebase services. The present release is designed for a focused deployment; wider commercial use would add tenant isolation, stronger identity, and formal operational controls.
PWAHTML / CSS / JavaScriptFirebase HostingFirebase AuthenticationCloud FirestoreSecurity Rules
ARCHITECTURE
A thin client on managed cloud services.
No proprietary hardware or local application server is required. The browser loads the application over HTTPS, Firebase verifies identity, and Firestore synchronizes authorized operational state in real time.
Real-time synchronization
Firestore snapshot listeners send roster, rotation, and waitlist changes to connected screens without manual refreshes.
Concurrent updates
Firestore transactions read current shared state and write coordinated changes, reducing lost updates during normal simultaneous use.
Responsive delivery
One codebase adapts to mobile, tablet, and desktop layouts and can be installed to a device’s home screen.
Release delivery
Firebase Hosting serves static assets globally over HTTPS. Source and release history are maintained in private Git version control.
SECURITY & PRIVACY
Protection is enforced beyond the interface.
Buttons are role-aware, but access control does not depend on hidden UI alone. Firebase Authentication establishes identity and Firestore Security Rules evaluate database requests.
Identity
Firebase Authentication validates credentials; access records map authenticated users to active roles.
Authorization
Rep, manager, office, and administrator roles receive different operational and reporting access.
Transport
Firebase Hosting enforces HTTPS/TLS for the application and its data connections.
Data minimization
Guest contact data is limited in purpose and designed for short-lived operational use—not payment, medical, or identity records.
Auditability
Operational activity is appended with actor, action, business date, and time for management review.
Safer expansion
Commercial multi-company deployment would isolate data by organization and location and move privileged actions to trusted server functions.
ENTERPRISE IDENTITY
SSO and MFA can be added when required.
The current focused release uses Firebase Authentication. A corporate deployment can be upgraded to federated identity rather than asking an organization to adopt TurnQ-specific credentials.
- Microsoft Entra ID / Azure AD through OIDC or SAML
- Google Workspace identity
- Other SAML 2.0 or OpenID Connect providers
- Multi-factor authentication and stronger password policy
- Company-controlled onboarding and deprovisioning
- Location-scoped roles and tenant membership
Important: SSO, MFA, App Check, and multi-tenant isolation are enterprise upgrade options, not claims about the current single-location release.
EMPLOYEE→Company Identity Provider→TurnQAuthenticated role + location access