Värav - Citizen Services Portal Built on Estonia's eID and X-Road
Resident Services Portal and Staff Console for an Estonian City
Designed and built a clickable staff console for an Estonian city's resident services portal: service queues with eligibility results, case detail with register data pulled over X-Road, decision drafting with lawful reasons and appeal information, batch signing with eID and deadline tracking - so residents are never asked for data the state already holds.
Most of our work is under NDA. Per agreement, we can share the work but not the company details - all names and identifying information shown here have been changed.
Impact
Dashboard, service queues, case detail, signing tray and deadlines. Every one of the 27 demo applications opens its own case with register data, documents, messages and history.
Population register, EHIS and STAR snapshots, each with its X-Road service, time and result. Refresh records a new snapshot, and opening social welfare data is gated and logged.
Reasons linked to register facts, legal basis, contest information (challenge or appeal within 30 days) and a hearing before any refusal. A refusal cannot be sent without the hearing.
7 launch services across 3 departments, 8 staff users, 6 decisions awaiting signature and a 12-week online vs front desk channel mix, with applicants who prefer Estonian, Russian or English.
The Problem
Rannakalda, a city of about 55,000, offered its services through PDF forms, e-mail addresses, a 2014 kindergarten queue system and the city hall front desk. Residents signed forms in DigiDoc and e-mailed them to a general inbox, where clerks re-typed data the population register already held. Parents had to call to learn their child's queue position, most forms were only in Estonian although about a third of residents speak Russian, and nobody could say how long a permit or benefit actually took.
Our Solution
Värav is the city's single portal for applying, paying and tracking municipal services with eID. Forms are pre-filled from national registers over X-Road, applications and decisions are signed digitally, and every decision carries its reasons and appeal information. City officials work the same applications in a staff console with queues, register data, decision drafting, batch signing and deadline tracking.
The Challenge: Public Services Under Administrative Law
A municipal e-service in Estonia sits on top of the national e-government infrastructure. Sign-in, register data, signatures and decisions each follow their own law, and the city has to meet all of them on every application.
Ask Once, Never Again
Estonian information policy generally requires that a public body does not ask a person for data another public database already holds. Every X-Road query to the population register, EHIS, STAR or the traffic register needs a legal basis and is logged, and residents can see queries about themselves.
Decisions That Stand Up in Court
Under the Administrative Procedure Act a decision must be in writing with its reasons and must state how, where and by when it can be contested, generally within 30 days. A refusal needs a hearing first, and processing deadlines come from law, city regulation or the city's own target.
Sensitive Data, Narrow Access
GDPR and the Estonian Personal Data Protection Act apply. Case officers may see register data only for cases in their queue, personal identification codes stay masked, and every view of health or social welfare data has to be logged.
Three Languages, One Legal Text
Estonian is the official language, so decisions are legally issued in Estonian. The city also serves residents in Russian and English, so every form and message is offered in three languages and decisions carry a courtesy translation marked as such.
Our Approach: From E-Government Rules to a Clickable Console
Spec and Rules Research
Mapped 9 roles from resident and representative to case officer, decision signer and data protection specialist, 36 screens (14 for residents and 22 in the staff console) and the data model for services, eligibility rules, applications, register snapshots, decisions, invoices and an append-only audit log. Wrote down the rules the design follows: TARA sign-in, X-Road and the once-only principle, the Administrative Procedure Act, eIDAS signatures in ASiC-E, the Public Information Act, GDPR, WCAG 2.1 AA and the Language Act.
Clickable Demo on a Production UI Kit
Built the staff console's 5 key screens on a production dashboard kit: the dashboard with KPIs, backlog by service and channel mix, queues with pick up, bulk assign and information requests, case detail with eligibility, register snapshots, document review, internal notes and decision drafting, the signing tray with batch signing by ID-card, Mobile-ID or Smart-ID, and deadlines in calendar and list views with extensions. All actions run on local state.
What a Production Build Adds
The 14 resident screens, from service catalogue and apply wizard to decisions and payments. Integration with TARA, an X-Road security server, Web eID and SK ID Solutions signing, bank link payments, camt.053 reconciliation, the city's document register, eesti.ee notifications and Entra ID staff sign-on. The remaining staff screens: service builder, analytics, X-Road query log, action log and settings.
Why It Works: Lawful by Design, Not by Review
Every Value Shows Its Source
Pre-filled answers carry the register and query time, and each eligibility rule shows the value it used and its result as pass, unclear or fail. Unclear results say what the officer must check by hand.
Deadlines Nobody Misses
Each case shows days left and the basis of its deadline, law, city regulation or city target, counted in working days. Cases turn amber at 3 working days and red when passed, and an extension records the reason and when the resident was told.
Decisions Complete Before Signing
The draft panel checks reasons, legal basis, contest information and the hearing before it can go to the signer named in the department's delegation. The signer sees the Estonian legal text, the courtesy translation and the case summary side by side.
Access Leaves a Trace
Personal identification codes are masked until a logged reveal, social welfare data opens only after a notice that the view is recorded, and every register refresh is written to the X-Road log with its legal basis.
Related case studies
View all: GovTech
Setback - Permitting and Licensing Platform with Parallel Plan Review
Designed and built a clickable permitting and licensing platform for a US city's development services department: completeness checks before the review clock starts, building, zoning, fire and public works reviews running in parallel against city targets, an inspection board that checks certifications, and one record for every permit with its parcel, parties, holds, fees and inspections.
Brolga - Case Management for a Fair Trading Regulator
Designed and built a clickable case management system for a Victorian consumer affairs and fair trading regulator: one intake queue for web, phone, email and agency complaints, rule-based triage, a case workspace with every party, deadline and document, and a conciliation board that keeps dispute help separate from enforcement.
Enterprise Software Engineering - Human + AI
Contact Us
© 2026 - Copyright. All Rights reserved Oceanlab
Location
Global Headquarters
21 Merchant Road, 3rd Floor, Singapore 058267
Main corporate office and leadership operations
North America Office
548 Market Street, PMB 12345, San Francisco, CA 94104
Client operations and business development
India Office
402 Shivalik Shilp II, SG Highway, Ahmedabad 380015
Engineering and delivery center
Enterprise Software Engineering - Human + AI
Contact Us
Locations
Global Headquarters
21 Merchant Road, 3rd Floor, Singapore 058267
Main corporate office and leadership operations
North America Office
548 Market Street, PMB 12345, San Francisco, CA 94104
Client operations and business development
India Office
402 Shivalik Shilp II, SG Highway, Ahmedabad 380015
Engineering and delivery center
© 2026 - Copyright. All Rights reserved Oceanlab