David Garcia and the platform that outlived the pandemic

Opinions expressed by Digital Journal contributors are their own.

Renewing a driver’s license in Honduras always meant standing in line. Citizens travelled to a transit office, handed over documents, waited, and had to complete face-to-face verification. When COVID-19 restrictions closed access to government buildings in 2020, that entire process had nowhere to go. The service still had legal obligations attached to it, and the people who needed it still needed it. The software architect who built the way out was David Garcia, whose online renewal platform for the National Directorate of Road Safety and Transport has since processed more than a million renewals.

“The challenge was to keep an essential public service operating while reducing physical contact and maintaining the controls required for a legally valid renewal,” Garcia said of the period. That last clause carries the weight. A license is a legal document, and a government cannot simply relax its verification standards because its offices are shut.

Garcia is careful about how the project’s origins get described. His documented role was to design and implement the digital platform for the DNVT and connect it to the government’s existing licensing infrastructure. “I would be careful about describing it as one person’s idea, because a project like this involved an institutional need and technical execution working together,” he said. “My responsibility was to turn that need into a secure, usable online process.”

The hardest requirement was identity. Proving that a citizen is who they claim to be, without that citizen ever entering a room, drove the platform’s architecture. One check would never carry that weight alone, so Garcia layered several: secure login, document submission, CAPTCHA, two-factor authentication, validation against government records, and a scheduled video interview conducted over Zoom.

“The video interview preserved an important human verification step without requiring the citizen to appear at an office,” he said. The Zoom component was subsequently examined by outside reviewers, passing Tier 2 Focused Security Testing in February 2021 and a further security re-review in 2023, independent validation for an integration handling sensitive government data.

The heaviest engineering, though, sat somewhere less visible. NACMIS, the national licensing system Garcia had helped build years earlier, remained the authoritative record. The new public-facing platform had to move in step with it. “The online platform had to synchronize identity data, application status, staff actions, documents, and notifications without creating a separate version of the truth,” he said. Security features mattered, but coordinating an entire citizen workflow around a two-decade-old core system was the larger problem.

It was built as a full operating platform, well past the scope of an emergency web form, and included automated renewal workflows and internal management tools for DNVT staff alongside the security controls. That decision explains its afterlife. The channel stayed open once restrictions lifted, and the department kept running it. Adoption, in Garcia’s framing, was the real signal. He declines to name a single moment when public trust arrived, describing it instead as something visible through sustained use.

Designing for the general public also imposed constraints that rarely trouble enterprise software. The platform had to serve citizens with widely varying levels of digital experience, from both desktop and mobile devices, many of them attempting the process for the first time. The complexity went where users could not see it. The citizen-facing steps stayed as plain as the legal requirements allowed.

Seen against the rest of his portfolio, the renewal system fits a pattern. NACMIS centralized sensitive government records. The renewal platform let citizens reach that infrastructure remotely while preserving validation and traceability. The Honduras–Spain license exchange service he later architected pushed the same idea across an international border, using secure SOAP services, digital certificates, SCSP v3 requirements, and automated legal-equivalency checks. “In each case, the goal was to reduce manual friction without weakening trust in the data,” he said.

Twenty years of this work licensing infrastructure, a Violence Observatory information system, cross-border interoperability has left Garcia, now working in British Columbia’s private sector, with a plain view of what digital government demands. He is reluctant to compare jurisdictions he has not worked inside. He is direct about the mistake he sees most often.

“Putting a paper form on a website is not enough,” he said. “A government should first identify the authoritative data, the legal controls, the points where citizens lose time, and the steps that can be safely automated.”