Confidential
Syrian Arab Republic
Planning and Statistics Authority
National Project Management Office (PMO)
- Code
- DOC-0203
- Version
- V5
- Date
- 2026-10-19
Solution & integration design
Unified Government e-Services Platform
1. Solution overview
The platform is the unified services portal, a request and forms engine, a central integration layer with the ministries’ systems and a request & service data store, hosted in the government data centre inside Syria with a 99.9% availability target.
2. Integration map
| Platform | Purpose | Pattern | Status |
|---|---|---|---|
| Civil registry | Applicant identity check | Synchronous — REST | In testing |
| Ministry systems | Request processing at the service-owning ministry | Synchronous — REST | Done |
| National interoperability framework | Data exchange between public bodies | Asynchronous — messaging | In build |
| Bank e-payment | Service-fee collection under the Central Bank of Syria framework | Nightly batch | Planned |
Every interface goes through the central API gateway; the national interoperability framework uses asynchronous messaging so a slow reply from a ministry never blocks a citizen’s transaction, with automatic retries and an audit trail for every message.
3. Simulator & fallback
A local simulator of the civil-registry, interoperability and e-payment interfaces is built in the first integration sprint, so the team keeps working when the national test environments go down — as they did for nine days in September.
4. Data model
- Beneficiary: national number, name, governorate, contacts, consents
- Request: type (civil-registry extract, no-criminal-record, building permit, municipal fee), owning body, stage, attachments, time limit
- Check: interoperability message number, issuing body, status, reply date
- Log: every change with who, when and through which channel
5. Cybersecurity & data protection
- Compliance with the national cybersecurity controls and the government cloud controls
- Personal data encrypted at rest and in transit under the approved data-protection policy
- An independent penetration test before launch with no critical or high findings
- Round-the-clock monitoring from the security operations centre
Enterprise architect
Architecture review
Confidential