Skip to content
NRM

PLATFORM CAPABILITIES

What every NRM platform ships with.

An enterprise platform developed, owned, and operated by Next Revolution Media, LLC. Every build begins with a scoped, documented methodology before a line of code is written — client assets, brand identity, and editorial strategy are incorporated into that scope, then engineered into a cohesive production system. The engine — content, events, directory, newsletter, advertising, attribution, security, and reporting — is built and operated by NRM under license. Each deployment is tailored to the client's operation; not every build includes every system below.

Capability 01

Editorial CMS + AI Content Assist

Native content system with AI copy, image, and SEO optimization at the editor's fingertips before publish.

  • TipTap rich editor (bold / italic / H2–H3 / lists / quote / link / image / upload / video)
  • Generate Image and Generate Logo AI buttons on every listing form
  • Enhance with AI + Format & Clean on every content block
  • SEO panel: Google Search Preview, Meta Title and Meta Description with live length guidance
  • Focus Keywords + Tags for search ranking and social discoverability
  • Author / editor / publisher roles with audit trail

Capability 02

Event Discovery Engine

Optional event ingestion with a four-stage flow — scrape → normalize → enrich → publish — deployed where the market calls for it.

  • Nightly ingestion run with per-source health monitoring and clean-run tracking
  • AI normalization, categorization, and image enrichment on every event
  • Self-serve event submission for any business, admin approval queue
  • Data Integrity surface: missing-field drill-down per source
  • Manual fixes preserved against re-scrape overwrites

Capability 03

Business Directory

Sub-directories (for example: Eat & Drink, Where To Stay, Adventure) with owner self-service and Stripe checkout.

  • Free, paid, and premium tiers with self-serve Stripe checkout
  • Business-owner dashboard: claim, edit, manage ongoing
  • Searchable, filterable browse with map views and categories
  • Vertical-specific fields (restaurants, lodging, services — configurable per directory)
  • Admin approval queue with pending-business counter on the Dashboard

Capability 04

Newsletter Engine (TipTap)

In-platform composition, segmentation, sending, and tracking — not a third-party email-tool wrapper.

  • TipTap rich composer with Enhance-with-AI and Format-&-Clean on every block
  • Featured Event / Weekend Events / Featured Stories / Local Favorite slots
  • CSV subscriber import with email validation (dupes + invalids skipped)
  • Send test to a short list of addresses · Schedule with timezone awareness
  • Header / Mid / Footer sponsor slots with revenue priority
  • Email Preview + Download PDF before scheduling

Capability 05

Attribution & Share Dashboard

Every piece of content that leaves the site is tracked back — first party, independent of third-party cookies.

  • First-party share_stats instrumentation across Facebook, X, Email, Instagram, Copy Link
  • Scope breakdown: Events / Restaurants / Businesses / Stories, per network
  • UTM-level campaign tracking standardized across the platform
  • Google Search Console + Google Analytics 4 integrations active
  • Content performance tied to directory and event conversion in Control Center

Capability 06

Custom Ad Inventory

Custom-built ad server across configurable managed zones. First-party impression and click tracking with GA4 cross-reference.

  • Managed ad zones across homepage, events, directory, verticals, articles, stories, newsletter
  • IAB-standard sizes: leaderboard, medium rectangle, and newsletter banner
  • First-party ad_stats table (ad_position + ad_id keyed)
  • GA4 + GTM dataLayer events: ad_impression, ad_click
  • Compatible with programmatic ad fill

CAPABILITY 07 · THE OPERATOR'S VIEW

Control Center · Reporting & Attribution

A unified operator surface where every system reports in. Growth, deliverability, engagement, inventory performance, and attribution all live in one place — not six dashboards and a spreadsheet.

Newsletter performance by campaign
Subscriber growth
Top content (events, businesses, stories)
Share activity by scope + network
Ad inventory performance (per zone, per ad)
Content-to-conversion paths

What it reports

Newsletter performance by campaign; subscriber growth with a rolling trend chart; top events, businesses, and stories by views; share activity by scope and network; events-by-category and businesses-by-category distribution; pipeline health across the ingestion pipeline where deployed; Data Integrity drill-down per source.

What it attributes

First-party share telemetry across the social networks tied to subscriber identity. Ad impression and click events on every managed ad zone, keyed to position and ad ID. Newsletter opens and clicks per campaign per subscriber. Content-to-conversion paths across directory, events, and stories.

Industry benchmark

Benchmarked against the Omeda Newsletter Benchmark Report for Media. Per-platform performance is reported to the operator monthly under SLA.

Why the integration matters.

One subscriber, one record.

A reader who signs up through the newsletter, submits an event, or claims a directory listing is the same identity across the platform — not six records in six tools you reconcile later.

Every output carries its source.

A story shared to a social network, an event in the newsletter, an ad on the homepage — each tracks back to the exact piece of content that drove the engagement.

No duplicate stacks.

Replacing one capability — moving the newsletter to a separate email tool, say — breaks the attribution loop and introduces a second system to reconcile. The integration is the value, not the individual pieces.

CAPABILITY 08

Security Layers

Independently audited · Supabase, Netlify, OWASP posture

Testing & audit

  • Supabase Security Advisor: clean — no errors; warnings reviewed and classified
  • Gitleaks scan of the full commit history — no secret exposure
  • OWASP ZAP baseline: clean pass with no failures
  • Nikto: no critical findings
  • AuditYour.app authenticated probe: top grade
  • Retire.js: no known-vulnerable libraries in production bundle

Controls in production

  • Supabase Auth on PKCE flow; URL-based session detection disabled
  • Row-Level Security policies on every user-facing table, each manually reviewed
  • Admin JWT verification + dual-gate authentication (cron secret or admin JWT) on protected edge functions
  • HTML escaping across edge function outputs
  • HSTS enforced at the CDN layer; HTTPS forced
  • X-Content-Type-Options, X-Frame-Options, Referrer-Policy present
  • Production bundle contains no service role key

Ongoing posture

  • Deployed edge functions versioned under source control
  • Shared auth helpers across edge functions (CORS, JWT verify, escaping)
  • Dedicated Security tab in Site Settings for admin review
  • Supabase advisors monitored; vulnerabilities triaged on cadence
  • Quarterly edge function audits and dependency reviews
  • CI gates planned to block direct dashboard deployments

CAPABILITY 09

Technical Architecture

Fast · Secure · Portable · Device-adaptive

Platform architecture diagram

The stack

  • Supabase — Postgres database with Row-Level Security, Auth, Storage, and Edge Functions
  • Netlify — global CDN hosting with HSTS, environment-variable secret management, and automated builds
  • React SPA — single-page application on React Router with code-splitting; small, portable production bundle
  • TipTap — rich-text editor engine across content and newsletter composition surfaces
  • GA4 + GTM — cross-check layer: dataLayer events feeding first-party attribution
  • Stripe — payment integration for self-serve directory tiers

Why it's fast

  • Single-page application: no server-render roundtrip after initial load
  • Netlify global CDN: edge-cached static bundle delivered close to the visitor
  • Supabase edge functions: serverless compute at request time, no VM warm-up
  • Lazy-loaded routes: only the code the visitor needs is downloaded
  • First-party attribution tables (ad_stats, share_stats) keyed on position/scope — no runtime joins
  • SLA target: fast page loads on standard mobile connections

Portable & device-adaptive

  • Mobile-responsive admin and public surfaces — same codebase, every device
  • Progressive content loading: event, directory, and story pages render top-first
  • Netlify environment variables: zero-touch migration between staging and production
  • Database-portable schema: Postgres standard, no vendor lock on data
  • Rich-text content stored as structured JSON (TipTap), not raw HTML — safe to re-render anywhere
  • Daily backups with rolling retention and off-site storage

PLATFORM OPERATIONS · SLA

High
availability uptime
Fast
page loads on mobile
Reliable
newsletter deliverability
Rapid
critical-issue response
Daily
backups with rolling retention
Monthly
performance report

Your platform. Built and run by NRM.

One conversation and I will tell you whether a licensed platform fits — or whether it fits at all.

Talk about a platform build