M2-03 Company Admin Page — Ts&Cs / Privacy Policy Configuration

Milestone: M2 — Platform and Client Admin SOW Reference: FR5 Requirement Clarity: ✅ Clear Dev Status: 🟢 Prototyped in POC (covered by the Branding entity's config fields — see M2-04)

Overview

Give the Staffing Company Admin a page to set and edit their organisation's Terms & Conditions and Privacy Policy text, which candidates see during the credential-claim and disclosure journeys.

Backend Tasks

• Confirm termsAndConditions / privacyPolicy fields on the Branding entity (app/backend/src/admin/entities/branding.entity.ts) are exposed via BrandingController (GET/PUT /organizations/:id/branding)
• Add basic content-length/HTML-sanitisation validation on save
• Surface T&Cs/Privacy Policy text on the candidate-facing claim and disclosure landing pages

Frontend Tasks

• Add a Ts&Cs / Privacy Policy tab or section to the org admin settings page
• Render the saved text on the public claim/disclosure landing pages

Dependencies

• Shares its entity/config surface with M2-04 branding config — build together where practical.
• Legal text content itself is authored by the JVP (per FR6 scoping note) — only the implementation/display is NeuralRays' responsibility.

Acceptance Criteria

• Ts&Cs configurable
• Privacy Policy configurable (per SOW Appendix 3, FR5 — Organisation Onboarding acceptance criteria)

Existing Reference Material

• ../../requirements/user_stories/organization-onboarding/organization-configuration.md
• M2-00-organization-onboarding-overview.md

Blockers & Risks

None identified — low-complexity, mostly already covered by the Branding entity's existing fields.