198 ·GitHub
What is this?
CohortHarbor is a self-hosted platform that combines employee accounts, onboarding materials, versioned company policies, online learning, exams, automated welcome emails, and private file protection into a single full-stack app, meant for internal deployment and further customization.
CohortHarbor is a self-hosted platform that combines employee accounts, onboarding materials, versioned company policies, online learning, exams, automated welcome emails, and private file protection into a single full-stack app, meant for internal deployment and further customization.Is this a SaaS I sign up for, or something I run myself?It's self-hosted: you deploy the Next.js app yourself and point it at your own SQLite database and private file storage, rather than using a hosted service.
It's self-hosted: you deploy the Next.js app yourself and point it at your own SQLite database and private file storage, rather than using a hosted service.How do I get it running?Clone the repo, install dependencies with pnpm, run 'prisma generate' (wired into postinstall), then start it with 'pnpm dev' (next dev) for development or 'pnpm build && pnpm start' for production; full environment variable and SQLite setup details are in docs/deployment.md.
Clone the repo, install dependencies with pnpm, run 'prisma generate' (wired into postinstall), then start it with 'pnpm dev' (next dev) for development or 'pnpm build && pnpm start' for production; full environment variable and SQLite setup details are in docs/deployment.md.What do I need to run it?You need Node.js 24.14.0 and pnpm 11.16.0; the database runs on SQLite via the better-sqlite3 Prisma adapter, so no separate database server or Docker is required.
You need Node.js 24.14.0 and pnpm 11.16.0; the database runs on SQLite via the better-sqlite3 Prisma adapter, so no separate database server or Docker is required.Does it come with real policy data or a working AI assistant already?No — the public repo only ships generic mock data (sample org, sample employees, generic exam questions) and does not include real employees, a production database, or SMTP/API keys; an 'AI knowledge assistant' is listed as a roadmap item and is not wired to any LLM yet.
No — the public repo only ships generic mock data (sample org, sample employees, generic exam questions) and does not include real employees, a production database, or SMTP/API keys; an 'AI knowledge assistant' is listed as a roadmap item and is not wired to any LLM yet.What does the MIT license actually cover here?Only the original CohortHarbor code and its SVG brand assets are MIT-licensed; bundled and vendored dependencies keep their own licenses, and the MIT grant doesn't cover trademarks or any organizational data you import when deploying it.
Only the original CohortHarbor code and its SVG brand assets are MIT-licensed; bundled and vendored dependencies keep their own licenses, and the MIT grant doesn't cover trademarks or any organizational data you import when deploying it.What roles does the permission system support?CohortHarbor ships with three roles — SUPERADMIN, ADMIN, and EMPLOYEE — enforced by server-side guards on admin routes, superadmin-only actions, employee APIs, and file downloads, since hiding UI elements alone isn't treated as a security boundary.
CohortHarbor ships with three roles — SUPERADMIN, ADMIN, and EMPLOYEE — enforced by server-side guards on admin routes, superadmin-only actions, employee APIs, and file downloads, since hiding UI elements alone isn't treated as a security boundary.What can employees actually do in the exam system?The platform includes online exams with question banks, exam assignments, retakes for failed attempts, and centralized result management, on top of policy reading and onboarding material delivery.
The platform includes online exams with question banks, exam assignments, retakes for failed attempts, and centralized result management, on top of policy reading and onboarding material delivery.Why does it add a watermark instead of stricter DRM?Policy, guide, and exam views can show the current session's name as a watermark to trace and discourage leaking content, but the README is explicit that it doesn't replace access control and can't stop screenshots.
Policy, guide, and exam views can show the current session's name as a watermark to trace and discourage leaking content, but the README is explicit that it doesn't replace access control and can't stop screenshots.What's planned next for CohortHarbor?The roadmap covers permission-aware AI policy Q&A with citations, broader onboarding workflow automation and approvals, and pluggable knowledge-base/vector-index integration for production deployments.
The roadmap covers permission-aware AI policy Q&A with citations, broader onboarding workflow automation and approvals, and pluggable knowledge-base/vector-index integration for production deployments.What are similar projects?documenso, pdfcraft, Resume-Matcher, rankme.fast, maxun, snagtime, dockhand, crm
documenso, pdfcraft, Resume-Matcher, rankme.fast, maxun, snagtime, dockhand, crmWhich topics is it in?onboarding, watermark, prisma, audit-log, orm, admin-dashboard, rbac, email, playwright, ocr, document-processing, enterprise
onboarding, watermark, prisma, audit-log, orm, admin-dashboard, rbac, email, playwright, ocr, document-processing, enterprise