Command Core is the tenant-isolated control plane behind every Nightingale product. Identity, audit, events, files and notifications live here — so the workflows above them stay simple, swappable and safe.
Read the control baselineMost teams start with one bundle built for how they actually work. Products marked as roadmap items are in development — everything else is available in the console today.
Venues, kitchens and multi-site hospitality groups
Run service, compliance and stock from one operating layer.
Order flow and service dispatch across the floor.
Opening, closing and compliance checks per shift.
Digital waste transfer notes and disposal evidence.
Stock counts, par levels and supplier ordering.
Fleet, transport and recovery operators
Keep vehicles compliant, jobs moving and revenue recovered.
Debt recovery workflow from first contact to settlement.
Daily walkarounds, defects and vehicle compliance.
Parts and consumables tracked against jobs.
Equipment register, inspections and service history.
People, HR and L&D teams
Onboard, engage and train every person on one record.
Structured onboarding journeys and document collection.
Time and attendance captured at the point of work.
Workforce operations, tasks and day-to-day coordination.
Shift-level checks and evidence at the point of work.
One sign-in across every product a tenant owns.
Roles defined once in Core, honoured by every module.
One subscription and invoice for the whole bundle.
Every action, in every product, in one append-only ledger.
Every Nightingale product plugs into the same identity, audit and delivery surface. You don't build these six things twice.
Managed auth with rotating keys, password-breach checks, and provider-agnostic SSO.
One instance, many tenants. Each row scoped, each request checked, each surface theme-aware.
A signed, replayable stream of every meaningful action, ready for downstream fan-out.
Immutable record of admin activity, module toggles, permission changes and access.
Sandboxed storage per tenant, with short-lived signed URLs and full upload attribution in the audit trail.
Fan-out to Slack, Teams, email and webhooks with quiet hours and digest windows.
The full Nightingale Software Group catalogue. Applications marked available are sold and provisioned today; the rest are in development and shown here so you can plan around them.
Demurrage and detention recovery.
UK hauliers, freight operators and carriers.
Fleet compliance and DVSA-aligned walk-arounds.
UK fleet, transport and O-licence holders.
Food safety, HACCP and temperature compliance.
Restaurants, pubs, cafés, hotels and hospitality groups.
Inventory, waste and live gross profit.
Restaurants, pubs and multi-site hospitality groups.
Cleaning and collection operations with proof of completion.
Cleaning, waste collection and skip-hire operators.
Waste transfer notes and duty-of-care records.
Any operator with duty-of-care obligations.
Workspace, desk and resource booking.
Multi-office and hybrid employers.
Mobile-first facilities management for UK properties.
Landlords, property managers and in-house FM teams.
Asset, equipment and planned maintenance tracking.
Teams with tools, IT kit, plant or equipment to track.
Attendance, rotas and payroll-ready hours.
Shift-based, multi-site and frontline employers.
Opening, closing and cleaning checks with photo evidence.
Venues, sites, retail and area management teams.
Recruitment, onboarding and right-to-work evidence.
Employers hiring frontline and office roles.
Customer relationship management and pipeline.
Sales, account management and growth teams.
Support helpdesk with SLA tracking.
Internal and customer-facing support teams.
Approval workflows and spend against live budgets.
Finance, projects and operations leadership.
Bookkeeping, ledgers and financial records.
Finance teams and owner-managed businesses.
AI assistance across Nightingale operational data.
Operations and leadership teams across the ecosystem.
Reservations, group bookings and guest management.
Restaurants, pubs and venues that take group bookings.
Food freshness, rotation and waste prevention.
Kitchens, food producers and hospitality groups.
Route planning and optimisation.
Delivery, collection and service fleets.
Yard moves, bay allocation and trailer status.
Depots, distribution centres and warehouse yards.
HR and employee management.
HR and operations teams.
Training records and learning management.
Compliance-led employers.
Quoting, proposals and win tracking.
Sales, service and trade businesses that quote work.
Tenancies, repairs and property compliance.
Landlords, managing agents and property teams.
Cross-product operational intelligence.
Multi-product Nightingale customers.
Pick the modules a tenant should see. Sidebar, dashboard, permissions and settings assemble from their manifests.
Wire Slack, Teams, email or webhook channels once. Quiet hours, digests and severity routing apply everywhere.
Every action flows through the event bus into the audit ledger. Answer 'who did what, when' without a screenshot.
The controls below reflect what Command Core enforces today. Nightingale Software Group is the operator of record.
Postgres RLS enforced on every table. Cross-tenant reads and writes are structurally impossible.
Password breach checks via HIBP, rotating publishable keys, and short-lived signed session tokens.
Outbound webhooks are HMAC-signed. Inbound provider callbacks are verified before any state change.
Admin actions, permission changes and module toggles are recorded in an append-only ledger.
Role scopes come from each module's manifest. Permissions cannot leak between tenants or products.
Data lives on UK-based infrastructure with defined subprocessors. Ask for the DPA.
Both. Core is a functional console on its own — identity, audit, files, notifications — and the substrate every Nightingale module runs on top of.
Every public table enforces Postgres row-level security scoped to the caller's active organisation. Server functions re-verify the caller before touching data.
Yes. Core supports managed OAuth today and can be configured against enterprise SAML/SSO providers on request.
Navigation, dashboards, widgets and API surface are withdrawn from the tenant. Data is retained so a later re-enable resumes cleanly.
UK-based managed Postgres and object storage, with defined subprocessors. A DPA and subprocessor list are available on request.
Workspaces are provisioned when your organisation subscribes to a bundle. If you already have an account, sign in. If you're evaluating Core for a wider team, we'll walk you through the controls and answer the diligence questions in one call.
