Every feature. A clear purpose and status.

Company administrators can manage internal-mail departments and active members. Only permitted members can send department mail.

Direct and department messages, private attachments and personal notifications connect to the dedicated Office Mail workspace.

Maintain permission-controlled employment information.

Record authorized manual attendance and connect supported biometric input.

Submit, review and track employee leave requests.

Associate employees with their department, job and reporting context.

Store only the employee documents the HR workflow requires.

Record authorized performance reviews and follow-up.

Associate employee skills and assigned learning with HR records.

Restrict sensitive case records to specifically authorized HR staff.

Give employees access to their own permitted information and requests.

Configure approved salary components for the employee/pay group.

Prepare a controlled monthly pay run.

Apply authorized additions and deductions with traceable inputs.

Track approved employee loans and advances in payroll inputs.

Use configured and maintained country-specific payroll rules.

Review permitted pay-run summaries and exceptions.

Provide employee-specific payslips after publication; email requires setup.

Prepare the required bank format for authorized payment processing.

Keep preparation, approval, publication and payment confirmation distinct.

Maintain assigned customers and their authorized business context.

Keep quotation revisions and their approval history.

Route the chosen quotation revision to the assigned approver.

Turn an approved customer request into a controlled order.

Connect the order to warehouse dispatch and transport handoffs.

Manage invoice lifecycle through assigned issue/cancellation rights and audit.

Route eligible returns through the required warehouse and finance review.

Review assigned team, customer and order activity.

Provide permitted sales reports/documents in their appropriate export formats.

Carry source-linked stock and financial handoffs across departments.

Keep stock records tied to their company warehouse and location.

Record authorized inventory movements and source references.

Receive goods against the relevant local or import record.

Prepare and confirm authorized stock dispatch.

Move inventory between permitted locations with traceability.

Require an approved reason and audit for inventory corrections.

Trace goods using assigned batch or serial identifiers.

Track applicable product expiry dates and exceptions.

Review balances and valuation using configured costing rules.

Link stock handoffs only where the operating workflow is enabled.

Maintain authorized suppliers and purchasing context.

Route an internal buying request to the responsible approver.

Issue authorized orders against approved procurement needs.

Link received quantities to purchase and warehouse records.

Send supplier invoices through assigned finance review.

Track the stock and accounting effects of an authorized return.

Apply company-specific procurement approval responsibilities.

Review permitted supplier, order and purchasing summaries.

Reconcile order, receipt and supplier-finance handoffs.

Review configured limits and customer exposure with assigned approval authority.

Follow unpaid invoices and outstanding balances in the assigned scope.

Assign collection follow-ups and review target progress.

Submit payment details for Accounts verification and authorized posting.

Group outstanding invoices by due-date/aging context.

Send permitted reminders using configured communication providers.

Track customer disputes and route adjustments to the authorized approver.

Review assigned collector activity and recorded collection outcomes.

Bring credit reviews, follow-ups, disputes and payment submissions together.

Create a customer receipt, submit it, and require a different authorized reviewer to approve or reject. Rejection requires a reason.

Allocate only approved receipts to the same customer and currency, with remaining receipt/invoice balance checks and a CNC subledger entry.

Record invoice due dates and currency, then inspect a customer ledger and currency-grouped balances. This is not a completed general-ledger integration.

Submit adjustment requests and post the source adjustment only after independent authorized review.

Record company bank metadata, review deposits independently, import statement lines and manually match eligible approved deposits. This does not initiate a bank transfer.

Inspect stale pending deposits, unmatched statement lines and approved deposits awaiting a match.

The receipt collector can submit a bounded handover against their approved receipt. A different authorized reviewer verifies or rejects it.

Compare approved receipts with verified handovers by collector, date and currency; require an explanation for shortage/excess and independent review.

Plan collector routes, record visits and allow the assigned collector to complete or mark no-contact. Optional submitted coordinates are not independently verified device GPS.

Set period/currency targets and compare approved receipt amounts. These figures do not prove bank-settled recovery; visit performance is a separate count.

Configure basis-point plans, calculate eligible claim proposals and route claims to independent review. Approval is not payroll payment.

Record promises, fulfillment/break/cancel states, disputes, escalation and resolution. Forecast summary is descriptive, not predictive AI.

Schedule follow-ups, complete/cancel tasks, generate reminder records and review a supervisor queue.

Record templates, campaign approval, planned communication history and manually reported outcomes. A manual status is not provider-verified delivery.

Store purpose/channel preferences with change history and cancel queued notices when consent is withdrawn.

Use consent checks, idempotency keys, attempts, dead-letter records and independently reviewed recovery requests in the notification foundation.

Organize the company ledger accounts and their authorized use.

Record and review source-linked accounting entries.

Track supplier obligations and customer balances.

Maintain authorized bank-account and reconciliation context.

Review payment/receipt records with controlled accounting posting.

Apply configured currencies, rates and accounting treatment.

Produce reports that reconcile to the underlying ledger.

Compare permitted budgets and costs within assigned responsibility.

Use configured jurisdiction-specific tax profiles and maintained rules.

Reconcile business handoffs before treating integration as complete.

The source manager dashboard supports review, follow-up, independent decisions, eligible closure and rejected-item rework for recovery-security alert reviews.

Filter by status, decision and manager, search text and browse 50 records per page in the source approval-review queue.

Assigned managers can add a follow-up to at most 25 eligible reviews together. This does not bulk-approve, reject or close them.

Inspect advisory same-department workloads, choose an eligible active manager and reassign only open unreviewed items with a reason and history.

Monitor overdue review work and issue scheduled, company-scoped internal reminders using configured policy.

View decision/rework history, verify the recorded audit chain and export bounded formula-neutralized reports within company permissions.

Authorized operations users can inspect sanitized worker records, acknowledge warnings and coordinate manual response. These are operational controls, not remote-desktop capability.

Internal employee mail, member-only chat and external company-domain mail have different records, permissions and delivery dependencies.

Approval, assignment and administrator health notices are stored internally for authorized recipients with personal read state.

Collection communication records, consent history, queue safeguards and provider foundations connect to CNC. External delivery still requires completed integration.

A CLI worker creates private checksum-verified copies and records inventory.

A separate worker compares recorded SHA-256 checksums. Matching bytes alone do not prove that a recovery drill will succeed.

Require verified inventory, a restore request and a different authorized approver before recovery execution.

Approved CLI recovery writes a new randomized private recovered file, with tenant/size/hash checks, without replacing the original attachment.

Inspect recovery execution status and stale processing records. Failed/interrupted work needs operator investigation rather than automatic replay.

A second authorized user approves release before an eligible download grant is issued.

A user-bound grant expires after five minutes, is consumed atomically and checks permissions, approvals, path, size and checksum. A failed stream needs a new grant.

Record grant, denial, expiry and integrity outcomes and route authorized review through the security-incident workspace.

Channel listing, members, creation, grant and revoke are recorded in the source batch; active company context is required.

Company/channel speaking-turn controls use a 15-second lease and a holder-only release.

Initial Flutter sign-in, secure token storage and read-only channel selection exist.

Microphone capture, an independently authorized media service and live audio delivery remain to be implemented.

Incident creation queues recipient-specific inbox entries for eligible active company admins and supervisors.

Separate view/respond/muster grants and revocation; acknowledgement and resolution require response permission.

CLI worker queues eligible open non-drill incidents, with duplicate prevention and transaction locking. Cron activation remains pending.

Company inbox and incident details refresh every 30 seconds while visible; stale warnings and last-check time are displayed.

These delivery channels are not implemented; database polling is a best-effort status view.

Company domains, mailboxes, provisioning events and a company-bound mailbox-request service are recorded.

Responsive domain/mailbox/status/request interface uses authorized backend routes and does not expose provider credentials.

Connect the authorized domain and cPanel/mail provider, then confirm mailbox existence before activation.

Reconcile the new account/company portfolio with legacy company permissions before relying on the dashboard.

Create a DNS TXT challenge with a 24-hour validity and verify the registered company domain. Domain verification does not itself create a mailbox.

Company administrators assign mailbox-specific read/send grants. Draft creation and stored inbox access follow the corresponding mailbox ACL.

Create a draft and queue it using authorized mailbox access. Queued is distinct from sent or delivered.

Read stored headers/body with mailbox ACL. A trusted connector importer has tenant checks, message-ID deduplication and per-mailbox sync state; automatic IMAP sync is not connected.

A callable encrypted SMTP adapter and credential-reference validation are present. The existing worker remains disabled for live sends until provider/ownership checks and staging integration are completed.

Operator requeue and retry foundations avoid automatically repeating ambiguous SMTP outcomes. SMTP acceptance is not proof of inbox delivery.

Use company-specific incoming/outgoing identity and the authorized company-mail setup.

Authorize branding changes for the selected company, maintain change history and clear stale context when switching companies.

Classify the trade movement and its required workflow.

Connect counterparties to the relevant international transaction.

Keep authorized contract records linked to the trade transaction.

Link shipments, documents and operational milestones.

Capture the selected Incoterm and relevant responsibilities for the transaction.

Use configured origin/destination requirements for the selected workflow.

Record clearance steps, documents and authorized status updates.

Link the transaction to its authorized finance workflow.

Connect shipment charges and allocations to the costing workspace.

Carry goods-receipt, cost and ledger references across the trade workflow.

Organize classification records by the international six-digit structure.

Map approved national tariff extensions for the selected country.

Use maintained country/version-specific rate data.

Record agreement applicability and supporting origin requirements.

Flag configured product restrictions and required permits.

Keep declared origin and supporting rule/document context.

Retain effective dates and changes in tariff datasets.

Prepare an estimate using selected classification, value and rate inputs.

Find candidate classification records for authorized review.

Link reviewed classifications and estimates to shipment items.

Organize the movement, schedule and assigned shipment responsibility.

Link container identifiers, bookings and shipment references.

Associate transport documents with their specific shipment.

Store the assigned carrier movement and available references.

Record the relevant loading, discharge and terminal context.

Follow reported milestones and estimated arrival updates.

Route configured delay events and supported exceptions through authorized notification services. Provider events and notification-channel integration remain required.

Track relevant charge periods, exceptions and supporting records.

Keep shipment status and documents linked to the trade transaction.

Locate the authorized shipment using a supported reference.

Planned authorized AIS/provider connection; availability depends on feed and permissions.

Ingest supported carrier/container milestone events with their source.

Connect the movement to its relevant loading and discharge context.

Show sourced estimates and retain update context.

Retain reported movement events and their chronology.

Record container specifications and relevant seal identifiers.

Display sourced schedule and route information when integrated.

Record intermediate handling/movement legs and their references.

Connect authorized delivery outcome to the shipment record.

Keep tracking and its source references tied to the right company shipment.

Limit document categories and access to the departments that need them.

Use authorized file handling for the linked business record.

Provide a print/PDF option where the specific document type supports it.

Enable the right templates for the relevant department and workflow.

Retain the document version associated with an approval or change.

Route the chosen version to assigned reviewers.

Track sensitive document access and lifecycle actions.

Find authorized files by their record and metadata.

Export permitted document-list metadata when the workflow requires it.

Attach supported documents contextually; no universal document menu or format grant.

Private Office Mail attachment storage, hold/review and recovery workflows are documented in their own modules. They do not implement versioning or governance for every Document Center record.

Record the applicable transaction permits and license references.

Plan authorized screening through maintained datasets/provider integration.

Flag configured goods restrictions for the selected jurisdiction.

Link required inspection evidence to the shipment or trade record.

Track origin certificates and their relevant transaction version.

Use maintained jurisdiction-specific checklists.

Route exceptions and release decisions to authorized reviewers.

Follow the validity of required permits and certificates.

Provide reviewable compliance decisions and evidence references.

Track LC terms, documents and authorized finance responsibilities.

Link collection documents and required banking workflow states.

Record guarantee terms, validity and transaction references.

Track approved advances and their accounting allocation.

Follow reported remittance progress and confirmation references.

Review required LC documents against the applicable transaction.

Record authorized charges and their supporting references.

Allocate verified finance costs through the configured costing method.

Reconcile finance transactions with authorized ledger posting.

Calculate product cost using the applicable local/import workflow.

Capture eligible shipment charge components.

Use the verified duty/tax records relevant to the goods.

Use the chosen rate/date and retain conversion context.

Combine authorized product and shipment costs.

Compare estimates with verified actual charges.

Apply the configured allocation basis to shipment items.

Review margin information from reconciled cost and sales records.

Link procurement, cost allocation and accounting references.

Record damage, supporting evidence and the responsible claim party.

Track received-versus-declared quantity discrepancies.

Link insurer references, documents and reported claim status.

Route a claim to the relevant supplier or carrier.

Manage the authorization and movement of a return shipment.

Link an eligible return movement to the relevant re-export workflow.

Retain decisions and verified settlement references.

Allow only the evidence and formats required by the claim workflow.

Connect claims to their original goods, shipment and trade records.

Present summaries only within the viewer’s authorized scope.

Review operational source-linked summaries and exceptions.

Reconcile finance summaries to the underlying ledger.

Review configured trade movement and transaction summaries.

Follow available milestone and carrier-status information.

Review open balances, due dates and recorded follow-up.

Analyze permitted sales and reconciled cost information.

Apply permitted report fields, scope and saved filters.

Enable the format suitable for the particular authorized report.

Summarize defined metrics with traceable source records.

Thirty-day department notice and escalation summaries distinguish generated notices from confirmed external delivery.

Seven-day worker run/failure trends summarize global operational telemetry without exposing other tenants’ approval records.

Health incidents can be manually mapped to a company department. Department counts and the separate 30-day reviewer decision summary have explicit windows and overlap limits.

Adapt authorized workspaces to supported screen sizes.

Prioritize tasks and forms relevant to mobile users.

Provide employee-specific requests and published information.

Expose only assigned approval work with applicable limits.

Plan configured delivery channels and permission-aware routing.

Publish supported authorized integration interfaces as they are implemented.

Connect approved shipping, payment and messaging providers.

Deliver configured business messages through approved providers.

One installable app for Android, iPhone and desktop.

Connect assigned rider, sales, collection and supervisor tasks.

Recipients are company users, not public email addresses.

An active department member can send to up to 100 other active members. Department delivery is recorded as one database transaction.

Internal notices identify new messages and uploaded attachments.

Sender upload supports PDF, PNG, JPEG and plain text up to 5 MiB.

Retention previews, legal holds, configured company quotas and independent cleanup review connect to the dedicated governance workspace.

Office Mail stays inside the company database. It does not use SMTP/IMAP or create a company-domain mailbox.

Thread participation and company identity determine which messages an authenticated user can access.

Fetch up to 100 messages newer than the caller cursor from threads they belong to. Polling is distinct from WebSockets or background push.

A thread member can advance their own read position. This is not a delivery confirmation or a read receipt for every participant.

Realtime push, voice/video transport and mobile background delivery require separate infrastructure and validation.

Review attachment usage and recovery-reference inventory inside the authorized company.

Configure no expiry or a 30–3650 day retention period and inspect bounded expiration candidates without deleting files.

Record a reason for legal hold and authorized release. Held attachments are excluded from cleanup previews and approval.

Quota checks use a locked company record during uploads. Companies without a configured quota remain unlimited.

A requester cannot approve their own cleanup request. Approval records a review only; it does not delete a file.

Record backup references and connect them to independent backup verification. A reference alone does not prove a recoverable backup.

Allowed uploads and downloads use company checks, randomized storage keys and SHA-256 verification.

The cleanup worker remains preview-only. Destructive cleanup and actual antivirus/content scanning are not implemented.

Company-scoped recent events and failure counters cover recovery grant creation, redemption and integrity failures without exposing tokens or file paths.

Open a review for a company user and require another reviewer to close it. The source also provides temporary manual recovery-download restrictions.

Escalate an open review to an incident. The opener cannot acknowledge or resolve their own incident; the independent acknowledging admin records the resolution.

Company policy controls acknowledgment and resolution targets. Assignment validates active company and department membership.

A scheduled worker routes overdue assigned incidents through configured active department members at levels 1–5. It records internal notices and dispatch history.

A designated recipient records one response note per dispatch. An escalation response is distinct from resolving the incident.

Formal active department managers receive follow-ups. A different authorized manager decides approval or rejection before permitted closure.

Reopen an eligible rejected review with a reason, preserve prior decisions and resubmit for independent review.

The manager dashboard exposes permitted review, follow-up, decision, close, rework, notice-read and export controls.

New decision/rework actions write chained audit entries; tenant-scoped CSV neutralizes spreadsheet formulas. The chain is not externally anchored and cannot defeat a privileged database rewrite.

An authenticated operations workspace combines personal approval notices, company escalation analytics and sanitized worker telemetry.

Filter personal in-app notices by read/unread state and type. Mark-all-read affects only the current user.

A company can configure an approval threshold of 1–720 hours. The worker uses company policy unless an operator explicitly overrides it.

Open reviews remind their assigned manager; reviewed items awaiting decision notify other eligible independent managers. No automatic approval or reassignment occurs.

Successful executed runs and qualifying failures are recorded. Early startup errors, process kills and failed log writes may not be recorded.

Configure a stale threshold of 15–1440 minutes and failure warnings. Run/failure trends are global operational metadata, not other companies’ business records.

A separate health-monitor job opens deduplicated warning events, records recovery and creates internal notices for authorized active company administrators.

Record who responded to a warning and their note. Acknowledgment does not clear a warning, repair a worker or replay a job.

Configure a 5–1440 minute response target and view a bounded 30-day report based on first acknowledgment during each event lifetime. Historical records use the current policy.

Assign an active company user, require a resolution note and enforce supported state transitions. Manual response state stays separate from observed worker recovery.

Assignment changes and eligible resolve/reopen actions create in-app notices for the assigned active user. Repeated unchanged assignment does not generate another assignment notice.

A permitted reviewer can approve a resolved incident or reject it with a reason. Self-review is denied; rejection returns the manual workflow to investigation.

Health resolution review requires a separately granted health.incidents.review permission. Existing supervisors are not granted this automatically; dashboard access still uses company.update.

Assign an incident to a department in the same company and report investigating, resolved and historical approval/rejection counts. Assignment is manual; approved/rejected counts can overlap after resubmission.

Reviewer decisions have a 30-day summary. The separate department mapping report is bounded and is not represented as a mutually exclusive completion percentage.

A stopped health-monitor job cannot report its own outage. Cron setup and independent uptime monitoring are deployment work.