Compliance
Who must be satisfied
The regulatory surface is the moat. Every authority below has an obligation, a lifecycle and a current status. Most of them are unserved by every ERP we could find.
| Authority | Rungs | Mandate | Served by |
|---|---|---|---|
| NAVTTC | R2 | Federal apex for TVET. Established 2005 under the Ministry of Federal Education & Professional Training. | Nobody. OpenEduCat markets 'NAVTTC compliance' on a landing page with no corresponding module. |
| Qualification Awarding Bodies (13 approved) | R2 | Only approved bodies may conduct examinations, assessments and certification, and only their certificates are valid. | Nobody. |
| NAC-TVS Accreditation | R2 | The formal accreditation instrument. Apply via ams.nac.gov.pk or in hard copy at NAVTTC HQ, Plot 38 H-9/4 Islamabad. | Nobody. |
| NVQF | R2 R3 R4 R5 R6 | Eight-level framework introduced in 2013 defining the skills for a qualification, equivalence, and RPL guidelines. | Nobody as a data model. This ladder is the strongest architectural validation of a single platform spanning R1 to R6. |
| HEC | R5 R6 | Federal regulator for higher education. Runs the national education cloud (Huawei Cloud Stack) for 450+ HEIs and launched MAKTAB on 6 January 2026. | SAP (public sector, via MAKTAB). Private universities have no credible Pakistani incumbent. |
| HEC IAM | R2 R3 R4 R5 R6 | National student identity project, announced alongside MAKTAB. | Nobody. Technical spec is not published — would need the HEDP project office or a MAKTAB implementer. |
| PEC | R6 | Accredits engineering programmes under the PEC Act 1976 (amended 2011), against national and Washington Accord standards. | Nobody. No ERP encodes the OBA or inspection-readiness workflow. |
| NBEAC | R6 | Accredits business and management programmes. Also operates BECC, enabling business schools and affiliated colleges to demonstrate compliance. | Nobody. The most dated, unmet and specific compliance need found in this research. |
| PMC / PMDC | R6 | Practitioner registration councils for medicine and dentistry. | Nobody. |
| BISE / FBISE | R3 R4 R5 | School registration and board affiliation. FBISE is also one of the 13 NAVTTC-approved QABs. | Nobody as a workflow. |
| NADRA | R2 R3 R4 R5 R6 | National identity registry. | Nobody. Frappe ships Razorpay (India); no ERP found ships NADRA. |
| 1Link | R2 R3 R4 R5 R6 | Cashless government payment collection used by HEC and other public bodies. | Nobody. JazzCash and Easypaisa are served by Skoo; 1Link by no one. |
| EOBI | R2 R3 R4 R5 R6 | Statutory pension and gratuity under the EOBI Act 1976, applying to establishments employing ten or more persons. | Partial. eDU SMARTZ and OpenEduCat cover payroll generally; no ERP found encodes the EOBI lifecycle. |
| FBR | R2 R3 R4 R5 R6 | Income tax, withholding and payroll taxation. | Nobody encodes Pakistan payroll tax specifics. |
| PCI DSS | R1 R2 R3 R4 R5 R6 | Cardholder data security for any online fee payment. | Handled by payment providers in PK products; no institution-level scope isolation shipped. |
| WES / ECE | R3 R4 R5 R6 | Foreign credential evaluation of Pakistani degrees for study and immigration. | Nobody, because almost nobody ships verifiable credentials in Pakistan. |
| PBTE / Provincial Boards of Technical Education | R2 | Conduct DAE and trade certification board examinations. PBTE is named explicitly by OpenEduCat as requiring practical exam scores to be tracked separately. | OpenEduCat claims per-board practical score separation. No other vendor addresses it. |
| HEC Anti-Plagiarism Policy | R5 R6 | HEC requires universities to use HEC-approved plagiarism detection tools for theses and research publications. | OpenEduCat (AI plagiarism detection). Nobody else. |
| WCAG 2.1 AA | R1 R2 R3 R4 R5 R6 | Accessibility standard for digital content. | Blackboard (Ally, VPAT) and Canvas (built-in checker) ship real conformance. No Pakistani vendor does. |
The Gulf attestation chain
Every Pakistani graduate seeking Gulf employment must complete this chain. It is manual, document-heavy, and takes weeks. GCC attestation remains compulsory because these are not Hague member countries, and UAE authorities require attested documents or there is no work visa.
- 1. Institution — University issues verifiable transcript / degree record digitally signed
- 2. HEC — HEC attests degree and transcript, verifying against the issuing institution. Degree (original) fee stated at PKR 3,000 per document in 2026
- 3. Notary — Notarisation by a registered notary public
- 4. MOFA — Ministry of Foreign Affairs, Pakistan (e.g. Jedah for Saudi Arabia)
- 5. Gulf MOE — Saudi / UAE / Qatar / Kuwait Ministry of Education
- 6. Legalisation — Final authentication. Traditional attestation remains compulsory for GCC, which are not Hague members
Why this belongs in an ERP roadmap
Verifiable credentials are needed for HEC’s Identity and Access Management project, for NAVTTC certificate validity and for NBEAC evidence anyway. The same infrastructure collapses this chain from weeks to minutes, and it is a fee-charging service the student pays for directly at roughly PKR 3,000 per document, with no customer acquisition cost.