Public docs & trust pages
Unpaywalled API documentation at /docs/api/*, security disclosures at /security, pricing at /pricing, customer stories at /customers/*, comparison pages at /compare/*. llms.txt manifest for AI crawlers.
What we ship, when we ship it. RSS
Unpaywalled API documentation at /docs/api/*, security disclosures at /security, pricing at /pricing, customer stories at /customers/*, comparison pages at /compare/*. llms.txt manifest for AI crawlers.
Partner-grade /api/v1/* surface with Bearer auth, HMAC-SHA256 signatures, scopes, and rate limits. Endpoints for org, employees, attendance, payroll, KYC (civic.bd), merchant.bd, exports.bd, ops.bd. Outbound webhooks with retry. OpenAPI 3.1 spec at /docs/api/openapi.json. Developer console under Settings → Developer API.
Webhook signatures now include nonce + 5-minute skew window. Replay attempts logged to api_key_events. Failure backoff capped at 12h with max 5 attempts.
Attrition risk scoring, fraud detection across payroll + attendance, anomaly scorer, hiring signal recommender. Powered by Lovable AI Gateway — no separate model keys required.
Full RLS audit across all public-schema tables. Every table has explicit GRANTs, policies scoped to auth.uid() via has_role, and is_org_member helpers. Supabase linter reports zero warnings.
BDT salary structures, overtime tiers per Bangladesh Labour Act 2006, EPZ wage board rules, festival bonus automation, AIT/TDS deductions, payslip rendering, 1pay.bd disbursement file generation.
Public ingest endpoints for biometric turnstiles and QR scanners. Geo-stamped mobile web check-in for field staff. Live floor visibility with sub-second updates via Supabase Realtime.
Every list (employees, attendance, leave, payroll) wired to Supabase Realtime. Charts re-render on insert/update without page refresh.
Education-mode faculty roster + timetable. NGO-mode project tagging + donor-segmented payroll cost reports. FD-6/FD-7 ready exports.
Workforce engine for SMEs, schools, NGOs, coaching centers, religious institutions, and foreign-invested entities in Bangladesh. Row-level security, audit logs, multi-org, BDT-native.