Deployment and kiosk
Veridian Motion ships as a Progressive Web App (PWA) — a TanStack Start web application installable on facility tablets and workstations. Deployment atveridianhp.com (or an agency-specific domain) uses Lovable Cloud /
Supabase for backend services.
PWA installation
Facilities install Veridian Motion on kiosk devices through the browser’s Add to Home Screen / Install flow (exact steps vary by OS). Installed PWAs launch full-screen without browser chrome, suitable for supervised intake stations.Offline behavior is limited. Assessment submit and photo upload require
network connectivity to Supabase. The app does not promise full offline
clinical workflow.
App-level kiosk hardening
Veridian Motion implements the following in the application (not a substitute for MDM):| Control | Behavior |
|---|---|
| No external navigation | External links and web egress blocked in kiosk context |
| Strict CSP | Content Security Policy limits script and resource loads |
| Self-hosted fonts | Typography served from the app; no Google Fonts or CDN font loads |
| Idle auto-reset | Inmate session clears after inactivity; returns to sign-in |
| No inmate external messaging | Messaging is in-app only; no SMS/email to outside parties |
Agency-provided lockdown
True locked kiosk operation in a correctional facility also requires agency-provided controls:| Control | Owner |
|---|---|
| MDM profile (single-app mode, disable browser, USB restrictions) | Agency IT |
| Network firewall (allowlist only required endpoints) | Agency IT |
| Physical supervision and escort | Custody staff |
| Device procurement and replacement | Agency |
| CJIS / FedRAMP / GovCloud hosting decision | Agency |
Network requirements
Kiosk devices need stable HTTPS outbound access to:- The Veridian Motion application host
- Supabase API and Storage endpoints (Lovable Cloud)
Self-hosted fonts and UI
The interface follows a plain, USWDS-aligned government tone — high contrast, accessible targets, minimal decoration. Fonts are bundled with the application build, supporting CSP and kiosk policies that block third-party resources.Environment separation
Use separate Supabase projects (or equivalent) for pilot vs production. Pilot environments should use synthetic or de-identified data until BAAs and agency hosting are in place.What’s next
Inmate kiosk flow
What inmates experience on the device.
Roles and access
Staff MFA and provisioning.
Security overview
Compliance split: app vs agency.