The Integrity Studio - Documentation

React-based web application with Auth0 authentication, PostgreSQL database, Tinybird analytics, and comprehensive monitoring.

Quick Links

• Quick Start Guide - Get started in 5 minutes
• Next Steps - What to do after setup
• Test Documentation - Testing guides and commands

Technology Stack

Frontend

• React 18 + TypeScript - Modern React with type safety
• Vite - Fast build tool and dev server
• Tailwind CSS - Utility-first styling

Backend & Database

• PostgreSQL - User data and application state
• Prisma - Type-safe database ORM

Authentication & Analytics

• Auth0 - User authentication and management
• Google Analytics 4 - Web analytics
• Facebook Pixel - Marketing analytics
• Tinybird - Real-time event streaming and metrics

Testing

• Vitest - Unit and integration tests
• Playwright - End-to-end browser testing
• Accessibility tests - WCAG compliance validation

Development Workflow

# Install dependencies
npm install

# Start dev server
npm run dev

# Run tests
npm test

Quick Start: Auth0

Get up and running with Auth0 in 5 minutes.

Quick Setup

# Install and configure (one command!)
npx @auth0/auth0-mcp-server init

# Follow the interactive prompts:
# - Select your MCP client (Claude Desktop, Cursor, etc.)
# - Choose read-only scopes for safety
# - Authenticate in your browser
# - Done!

Test it: Open Claude Desktop and ask: "List all my Auth0 applications"

What You Get

• Manage Auth0 via AI/natural language
• 20+ authentication tools
• OAuth 2.0 compliant
• Free and open-source (MIT)
• One-command setup

Quick Troubleshooting

# Re-authenticate
npx @auth0/auth0-mcp-server logout
npx @auth0/auth0-mcp-server init

Integrity Studio LLC - Marketing Strategy Summary

AI Consulting for Nonprofit Organizations | Updated February 2026

Executive Summary

This document summarizes comprehensive market research on how Integrity Studio LLC should position and market its AI consulting services to nonprofit organizations in 2026. This version (2.0) includes a new Market & Competitive Environment Shifts section documenting changes since the original January 2025 plan.

Key Market Findings

Strategic Positioning

Unique Value Proposition

"Enterprise AI capabilities at nonprofit-accessible pricing, with governance and responsible implementation built in from day one."

Key Differentiators

1. Nonprofit-First Approach - Solutions designed for mission-driven constraints
2. Responsible AI Focus - Ethics, governance, and compliance expertise (addressing the 65-70% policy gap); AI governance now a funder requirement
3. Accessible Pricing - Sliding scale, pilot programs, and grant application support ($150M+ in AI grants available)
4. Education-Centric - Capacity building over consultant dependency (only 28% of nonprofits have provided formal AI training)
5. Technical + Strategic - Full-stack services from policy to implementation, including data readiness assessment

Go-to-Market Strategy

Phase 1: Foundation (Months 1-3)

• Join NTEN (Nonprofit Technology Enterprise Network)
• Optimize digital presence (website, LinkedIn)
• Create high-value lead magnet (AI Readiness Assessment)
• Launch LinkedIn outreach campaign
• Publish SEO-optimized blog posts

Phase 2: Traction (Months 4-6)

• Launch monthly webinar series
• Guest blogging campaign
• Develop "90-Day AI Pilot Program"
• Formalize referral partnerships

Phase 3: Authority Building (Months 7-12)

• Execute "State of AI in Nonprofits 2026" research report
• Submit speaking proposals for NTC 2027
• Launch "Nonprofit AI Practitioners" community
• Publish thought leadership in major outlets

Success Metrics

12-Month Targets

Market & Competitive Environment Shifts (Jan 2025 → Feb 2026)

Material changes in the nonprofit AI market since the original plan was drafted.

Market Adoption Trajectory

The nonprofit AI landscape has moved from early experimentation to operational integration in 12 months.

NONPROFIT AI ADOPTION INDICATORS: Jan 2025 vs. Feb 2026

Using AI tools        ████████████████░░░░ 82%  (Jan 2025)
                      █████████████████░░░ 85%+ (Feb 2026)  ▲ +3-5%

Lack formal AI policy ███████████████░░░░░ 76%  (Jan 2025)
                      █████████████░░░░░░░ 65-70% (Feb 2026)  ▼ -6-11%

Feel unprepared       ██████████████████░░ 92%  (Jan 2025)
                      ███████████████░░░░░ 75-80% (Feb 2026)  ▼ -12-17%

Privacy concerns      ██████████████░░░░░░ 70%  (Jan 2025)
                      ███████████████░░░░░ 72-78% (Feb 2026)  ▲ +2-8%

Formal AI training    █████░░░░░░░░░░░░░░░ ~20% (Jan 2025 est.)
                      █████░░░░░░░░░░░░░░░ 28%  (Feb 2026)    ▲ +8%

Board discussing AI   █████░░░░░░░░░░░░░░░ 29%  (Jan 2025)
                      █████████░░░░░░░░░░░ 45%  (Feb 2026)    ▲ +16%

Key insight: Adoption is rising but governance lags badly. The "action gap" remains massive — only 28% train staff, 30-35% have formal policies. This is the core market opportunity.

Grant Funding Landscape (3x Growth)

AI GRANT FUNDING AVAILABLE TO NONPROFITS

Jan 2025:  $50M+    ██████████░░░░░░░░░░░░░░░░░░░░
Feb 2026:  $150M+   ██████████████████████████████░  ▲ 3x growth

Competitive Landscape Evolution

Biggest disruption: Not from other consultants — it's from embedded AI in major platforms. This reduces basic tool consulting demand but increases demand for strategic guidance, governance, training, and data readiness.

Regulatory Environment Changes

AI REGULATORY TIMELINE (Relevant to Nonprofits)

2024    EU AI Act adopted
        ├── International nonprofits must comply
        └── Sets global precedent for AI governance

2025    US state-level AI laws accelerating
        ├── Colorado AI Act (automated decision-making)
        ├── California AI transparency requirements
        └── 10+ additional states with active legislation

2025    Sector-specific AI regulation
        ├── HIPAA + AI guidance (health nonprofits)
        ├── FERPA + AI guidance (education nonprofits)
        └── FTC enforcement actions on AI claims

2026    Insurance and funder requirements
        ├── D&O insurance carriers asking about AI policies
        ├── Foundations requiring AI ethics in grant apps
        └── Government contracts requiring AI governance

Demand Shift: "What Is AI?" → "How Do We Govern It?"

Strategic Implications

Marketing Budget & ROI Projections

Year 1 Financial Planning | Updated February 2026

Executive Summary

Total Year 1 Marketing Investment: $22,000-$24,000 (revised from $21,400-$22,000)

Budget Breakdown

One-Time Setup Costs

Monthly Recurring Costs (2026 Pricing)

LinkedIn Ad Benchmarks (Revised)

Revenue Model

Service Offerings & Pricing

Key Insight

All scenarios break even very early (Month 3) due to relatively low marketing costs and high deal values. LinkedIn ad CPL is higher than originally projected, but organic content, webinars, and referrals remain highly cost-effective.

12-Month Marketing Timeline & Gantt Chart

Detailed month-by-month execution plan for Integrity Studio's go-to-market strategy. Updated February 2026.

Visual Timeline

PHASE 1: FOUNDATION (Months 1-3)     [============------------]
PHASE 2: TRACTION (Months 4-6)       [------------============]
PHASE 3: AUTHORITY (Months 7-12)     [------------------------============]

Month 1: Foundation Building

Week 1

• Join NTEN as individual member ($150)
• Audit and optimize website for nonprofit AI keywords
• Create and optimize LinkedIn Company Page
• Set up email marketing platform
• Create first lead magnet: "AI Readiness Assessment"

Week 2

• Write and schedule first 4 blog posts
• Set up lead magnet landing page
• Configure email automation sequences
• Begin NTEN community participation

Year 1 Summary

Expected Outcomes

Marketing Content Pieces

Ready-to-publish content for Integrity Studio LLC. Updated February 2026.

Blog Posts

Blog Post 1: "85% of Nonprofits Use AI But 65-70% Lack Policies"

Target Keyword: nonprofit AI policy
Word Count: 1,800-2,000 words

Addresses the persistent disconnect between AI adoption and governance in nonprofits, covering legal, operational, and reputational risks. Now includes AI governance as a funder requirement.

Blog Post 2: "How to Write an AI Policy for Your Nonprofit in 30 Days"

Step-by-step guide with day-by-day implementation plan, template walkthrough, and board presentation tips.

Blog Post 3: "AI Grants for Nonprofits 2026: $150M+ in Funding"

Comprehensive guide covering OpenAI, Google.org ($75M+), AWS, Microsoft, Patrick J. McGovern Foundation, Anthropic, and community foundation programs.

Lead Magnets

1. AI Readiness Assessment - Self-scoring PDF evaluating 5 key dimensions
2. AI Policy Template - Fully editable Word document
3. 2026 AI Grant Database - Excel spreadsheet with 25+ programs ($150M+ landscape)

Email Sequences

5-email welcome sequence for new subscribers including:

• Email 1: Welcome + Deliver Lead Magnet
• Email 2: Introduce yourself + Value
• Email 3: Educational value (#1 mistake)
• Email 4: Social proof + Resource
• Email 5: Clear CTA

Marketing Implementation Templates & Scripts

Ready-to-use marketing materials. Updated February 2026.

Email Templates

• Lead Magnet Delivery Email
• Webinar Invitation Email
• Post-Webinar Follow-Up Email
• Cold Outreach Email
• Pilot Program Proposal Email
• Monthly Newsletter Template

LinkedIn Scripts

• Connection Request (Personalized)
• Follow-Up Message
• Thought Leadership Post Template
• Case Study Post Template
• Comment Strategy

Webinar Outlines

1. "AI Policy Development for Nonprofits: 60-Min Crash Course"
2. "Getting Started with AI: Your First 3 Use Cases"
3. "AI Grant Opportunities 2026: How to Apply and Win"

Partnership Outreach

• Complementary Consultant Partnership Template
• TechSoup Service Provider Inquiry
• NTC 2027 Sponsorship Inquiry

Proposal Template: 90-Day AI Pilot Program

• Executive Summary
• Understanding Your Challenge
• Proposed Approach (4 phases)
• Success Metrics
• Timeline
• Investment

Auth0 Setup Guide

Complete guide for setting up Auth0 authentication.

Step 1: Create Auth0 Application

1. Log in to Auth0 Dashboard at manage.auth0.com
2. Click "Applications" - "Applications" - "Create Application"
3. Select "Single Page Application"
4. Note your Domain and Client ID

Step 2: Configure URLs

Allowed Callback URLs:

http://localhost:5173,
http://localhost:5173/callback,
https://yourdomain.com

Step 3: Environment Variables

# Auth0 Configuration
VITE_AUTH0_DOMAIN=your-domain.auth0.com
VITE_AUTH0_CLIENT_ID=your_client_id_here
VITE_AUTH0_AUDIENCE=https://your-domain.auth0.com/api/v2/

Available Components

• <LoginButton /> - Pre-styled login button
• <LogoutButton /> - Pre-styled logout button
• <UserProfile /> - User profile display
• <AuthGuard /> - Protected content wrapper

Security Best Practices

• Never commit .env file
• Use HTTPS in production
• Enable MFA for sensitive operations
• Implement proper token refresh logic

Auth0 MCP Server + Tinybird Analytics Setup

Part 1: Auth0 MCP Server Setup

Step 1: Install

npx @auth0/auth0-mcp-server init

Step 2: Interactive Setup

The installer will prompt you to:

1. Select your MCP client (Claude Desktop, Cursor, Windsurf)
2. Choose scopes (read:users, read:clients, read:logs)
3. Authenticate in browser

Security Best Practices

# Read-only mode (recommended for testing)
npx @auth0/auth0-mcp-server init --read-only

# Logout when done
npx @auth0/auth0-mcp-server logout

Security Checklist

• Auth0 credentials stored in system keychain
• Logout implemented when switching contexts
• Error messages don't expose sensitive data
• HTTPS enabled for all API calls

User Database Integration Guide

Complete guide for integrating Auth0 with PostgreSQL database and MCP services.

Overview

This system provides:

• User authentication with Auth0
• User data storage in PostgreSQL
• User context in MCP Memory (knowledge graph)
• Profile enrichment using MCP Fetch
• Activity and session tracking
• Role-based permissions

Database Schema

• users - Core user information
• user_profiles - Extended profile data
• user_sessions - Active sessions
• user_activity - Activity log
• roles - Role definitions
• user_roles - User-role assignments

Setup Steps

# Create database
createdb integrity_studio

# Run schema migration
./scripts/setup-database.sh

Usage Example

import { useUserSync } from './hooks/useUserSync';

function App() {
  const { dbUser, isSyncing, syncError } = useUserSync();

  if (isSyncing) {
    return <div>Syncing user data...</div>;
  }

  return <div>Welcome {dbUser?.name}!</div>;
}

Schema.org Structured Data Implementation

Comprehensive Schema.org recommendations using JSON-LD format.

Implemented Schema Types

1. Organization Schema - Knowledge Graph presence, brand recognition
2. ProfessionalService Schema - Service-specific rich results
3. Service Schemas - 6 individual services defined
4. WebSite & WebPage Schemas - Sitelinks search box
5. BreadcrumbList Schema - Navigation hierarchy
6. FAQPage Schema - Expandable Q&A in search
7. LocalBusiness Schema - Local pack eligibility
8. BlogPosting Schemas - Article rich results

Rich Results Eligibility

• Knowledge Panel - Organization information
• Sitelinks & Search Box - Enhanced navigation
• FAQ Rich Results - Expandable Q&A
• Breadcrumbs - Navigation path
• Local Pack - Business listings
• Service Snippets - Detailed service info

SEO Impact

• Visibility: 30-40% increase in SERP visibility
• CTR: 15-25% improvement in click-through rates
• Trust: Enhanced credibility through knowledge graph

Tailwind CSS Class Usage Chart

Documentation of all Tailwind CSS class combinations used across project files.

Sample Class Definitions

Naming Conventions

1. Use semantic prefixes: text-*, bg-*, flex-*, grid-*, border-*, card-*, btn-*
2. Add modifiers: -light, -dark, -sm, -md, -lg, -primary, -rounded, -responsive
3. Use kebab-case for multi-word names
4. Order: [component]-[variant]-[size]-[state]

Total unique class combinations: 99

Tailwind CSS Usage Chart

Documentation of complete Tailwind CSS class combinations excluding classes defined in index.css.

Naming Conventions

1. Use semantic prefixes based on primary utility
2. Add descriptive modifiers: -muted, -light, -accent, -bold, -rounded, -interactive, -animated, -responsive
3. Use component context when no clear pattern is found
4. Keep names concise but descriptive
5. Use kebab-case for multi-word names

SEO and Schema.org Validation Tests

Automated testing strategy for structured data and Rich Results eligibility.

Test Coverage

Schema Validation Tests

• Valid JSON-LD structure
• Required properties for each schema type
• Organization, Service, WebSite, FAQPage schemas
• Proper @id references

Rich Results Validation Tests

• Organization rich results
• Local Business rich results
• FAQ rich results
• Sitelinks Search Box
• Breadcrumb rich results

Running Tests

# Run schema validation tests
npm test -- tests/seo/schema-validation.test.tsx

# Run rich results tests
npm test -- tests/seo/rich-results.test.tsx

# Run all SEO tests
npm test -- tests/seo/

Performance Expectations

• 30-40% increase in SERP visibility
• 15-25% improvement in click-through rates
• Enhanced Knowledge Graph presence
• Better local search rankings

Accessibility Implementation Guide

Comprehensive accessibility features for WCAG 2.1 AA compliance.

Features Implemented

1. Semantic HTML & ARIA

• Proper heading hierarchy (h1 - h2 - h3)
• Semantic HTML5 elements
• ARIA landmarks for screen readers
• ARIA live regions for dynamic content

2. Keyboard Navigation

• Full keyboard accessibility
• Visible focus indicators (2px blue outline)
• Logical tab order
• Skip navigation link

3. Form Accessibility

• Proper label associations
• Real-time validation with screen reader announcements
• Error messages with role="alert"
• Required field indicators

4. Visual Accessibility

• Enhanced color contrast (WCAG AA)
• High contrast mode support
• Reduced motion support
• Print accessibility

Testing

# Run accessibility tests
npm run test:a11y

# Watch mode
npm run test:a11y:watch

WCAG 2.1 AA Compliance

• Perceivable: Text alternatives, captions, contrast
• Operable: Keyboard accessible, timing, seizures
• Understandable: Readable, predictable
• Robust: Compatible with assistive technologies

Security Documentation

This directory contains security-related documentation.

Best Practices

• Never commit .env files or API tokens
• Use Doppler for secrets management
• Rotate tokens every 90 days
• Report vulnerabilities to security@integritystudio.ai

Cloudflare Access Policy

const accessPolicy = {
  "name": "secure-app-access",
  "decision": "allow",
  "include": [
    {
      "email_domain": {
        "domain": "integrityai.com"
      }
    }
  ],
  "session_duration": "24h"
};