Recruitment

ATS → offer → employee → onboarding.

Performance

Goals and reviews with controlled compensation recommendations.

Learning

Compliance and skills courses inside ESS.

More

These tools are available when needed but stay out of the primary cutoff-day workflow.

Start migration

Self-diagnosing onboarding

Bank + agency + production proof

The same acceptance evidence used by the production gate is pulled into onboarding automatically. No duplicate implementation spreadsheet.

Migration certificate

Exception → root cause → golden test → Regression Lab

Uncaptured exceptions

Exception library

Golden regression fixtures

People & digital 201 files

Keep core employment and payroll data in one record. The browser demo masks government identifiers and stores only document metadata; production storage is private and tenant-scoped.

Add employee

Add 201-file document

201-file document register

Timekeeping integrations

Bring attendance in from biometric devices, REST APIs, webhooks or CSV. Connectors normalize external events into the same attendance model used by payroll.

Connector

Configured connectors

Import device export

CSV/XLSX columns are auto-recognized for punch events or daily attendance summaries. Events are normalized into daily attendance.

Webhook/API contract

POST /functions/v1/timekeeping-webhook
x-connector-id: <connector UUID>
x-connector-token: <connector secret>
{
  "employee_id": "EMP-001",
  "timestamp": "2026-08-10T08:01:00+08:00",
  "event_type": "in",
  "device_id": "MAIN-01"
}

The production Edge Function validates the connector secret, organization, employee mapping, timestamp and idempotency key before writing an event.

Recent normalized events

Pay setup

Configure company payroll assumptions and employee-level earnings, deductions and loan schedules. Statutory multipliers remain locked to the ruleset minimums instead of being freely editable.

Company payroll policy

Configured premium scenarios

Add earning / deduction

Earnings & deductions register

Add employee loan

Loan schedules

1. Bring the current payroll

CSV and XLSX supported. Saved column mappings are reused when the same layout returns.

Migration evidence

BIR annualization & final pay

Prepare year-end or separation tax adjustment, prior-employer data and final-pay components. This remains a review worksheet until validated against live company cases.

Final pay review

Separation pay readiness

Track the 30-day general final-pay deadline, calculate the employee settlement, prove each checklist item, and build a Final Pay Evidence Packet before release.

Readiness checklist

Payroll & statutory outputs

Generate review-ready worksheets from the current payroll calculation. Official electronic filing formats still need agency-specific validation before production submission.

Payroll register

Gross, deductions, tax, net and employer cost.

SSS worksheet

MSC, employee/employer shares and totals.

PhilHealth worksheet

Premium basis and shares.

Pag-IBIG worksheet

Fund salary and shares.

BIR 1601-C preparation

Compensation, exemptions, mandatory deductions and tax totals.

BIR 2316 preparation

Annual employee compensation and withholding fields.

Employee master export

Employment, department, compensation and masked statutory-reference data.

Attendance register

Scheduled/worked hours, late, undertime, absence, OT and day classification.

Leave register

Leave type, dates, days, request status and review state.

Formatted payslips

Print-ready employee payslips with earnings, statutory deductions, tax and net pay.

Current 1601-C summary

Government filing preparation center

Build validated preparation files and checklists for the official government portals. Payroll Software Philippines does not bypass My.SSS, PhilHealth EPRS, Pag-IBIG channels or BIR filing systems.

GL / accounting export

Balanced journal export from gross payroll, statutory liabilities, other deductions and net payroll payable.

Payroll Confidence Graph

Source → calculation → approval → bank → statutory month → filing → receipt.

BIR 1601-C cutoff package

Current-cutoff compensation and withholding detail tied directly to the calculated payroll.

BIR 1604-C / Alphalist

Annual employee compensation, tax withheld, MWE/non-MWE classifications and reconciliation totals.

SSS e-CL preparation

Employee SS number, compensation/MSC, employee share, employer share and EC for review before My.SSS e-CL/PRN.

PhilHealth EPRS preparation

PIN, premium basis and employee/employer shares for reconciliation before EPRS payment/reporting.

Pag-IBIG remittance preparation

MID, fund salary and employee/employer savings contributions for portal/remittance review.

BIR Form 2316 package

One annual preparation record per employee, tied back to payroll YTD and withholding totals.

Reconciliation gate

Filing packages are blocked when required employee IDs are missing or report totals disagree with approved payroll.

Payroll → statutory reconciliation

Generated package totals must reconcile back to the approved payroll before the cutoff can pass the release gate.

Submission receipt

Attach an external submission/payment reference and hash the receipt into the evidence trail.

Payroll Evidence Packet

Archive the approved register, ruleset, employee population, bank batch hash, filing hashes, reconciliation results, approvals, anomalies and submission receipts in one tamper-evident manifest.

Filing package history

Organization profile

Change impact

Effective-dated rule library

Compliance center

One view of payroll-data readiness, employee statutory data, policy controls, unresolved issues and filing/remittance tasks. This does not replace legal advice or an agency filing portal.

Automated readiness checks

Add compliance task

Compliance calendar & tasks

Release checks

Generic bank credit export

This built-in export is a generic CSV only. It is not a BDO, BPI, Metrobank, UnionBank or other bank-specific format.

Release lifecycle

Approval cannot move money. Backend release requires the Ready-to-Pay attestation, a validated bank profile/batch, immutable payroll snapshot, and all release checks.

Why a gate failed

Every blocker links back to the source workflow instead of leaving payroll operators to hunt through the product.

Maker-checker approval

A payroll maker can prepare and submit a run but cannot approve the same run. The production database enforces the control server-side and stores an immutable snapshot.

Approval timeline

Employee self-service

This screen is the HR/payroll administrator preview. The production employee portal is /employee/, where the authenticated employee is server-bound to exactly one employee record and there is no employee selector.

My payslip preview

My leave

My recent attendance

Request leave

Request profile change

Source-linked pay dispute

Dispute an exact peso/source record instead of opening a generic HR ticket. Accepted corrections can be simulated as a payroll delta.

Payroll expert review workflow

Request a human review when a payroll run needs specialist attention. The workflow is built; no external reviewer network is connected yet, so requests stay unassigned until you onboard a payroll/accounting partner.

Review queue

Accountant role

Signup metadata assigns the accountant role. Client-company access is membership-based; role badges are visible in the product header.

Continuity by design

Each saved run can be exported as a 3-sheet workbook. A company-level continuity export keeps snapshots and evidence customer-owned.

Payroll Regression Lab

Replay a proposed rule or payroll configuration against immutable historical runs. Declare what is allowed to change; anything material outside that contract is an unexpected regression and blocks publication.

Historical evidence set

Payroll Evidence Graph

Trace a peso from source record to rule, calculation, immutable payroll snapshot, approval, bank batch, statutory liability, filing and receipt. AI may explain this graph later; the graph itself is deterministic evidence.

Local Holiday Radar

Stage official local proclamations, match them against each employee's actual work location, estimate payroll impact, and require review before applying them to schedules.

Official proclamation feed

Impact

Official source → review → replay → publish

Every statutory rule change carries its source, source hash, interpretation, dual review, Regression Lab report and effective date. Publication is blocked if the evidence chain is incomplete.

Publish gate

Deployment history

Access & client roles

Invite accountants, owners, payroll administrators, makers, checkers and viewers. Accountant membership never grants payment-release authority by itself.

People with access

Accept an invitation

Sign in with the same email address the invitation was sent to, then paste the secure token.

Who saw what, why, and when?

Track access to salary and statutory IDs, payroll exports, membership changes, processors, retention and data-subject requests. Export a privacy evidence packet for audits and incident response.

Audit events

Evidence export

Includes access members, processors, data-subject requests, retention metadata and audit events.

Leave ledger · employee ESS · profile changes · biometric connectors

These workflows use the live Supabase backend. Demo mode shows the design but does not create production evidence.

Leave policies & ledger

Employee portal invitations

The employee accepts this token while signed in with the same email. The login is bound to one employee record until an owner/payroll admin explicitly revokes portal access.

Profile-change review

Bank-account requests remain encrypted at rest. Approval applies the requested value and records before/after evidence.

Pending leave requests

Biometric / timekeeping connectors

Open timekeeping exceptions

External proof before payroll-of-record

Bank formats, agency submissions, staging RLS, backup/restore and production MFA only turn green when evidence is attached and independently reviewed.

Submit validation evidence

Production MFA

6-digit codeVerify MFA

Validation cases

The submitter cannot approve their own validation. External bank/agency proof must include the acceptance/reference artifact.

Deployment test tooling

npm run test:rls:staging runs the destructive-safe staging RLS policy suite using SUPABASE_DB_URL. npm run drill:restore restores a real backup into an explicitly disposable target and verifies payroll invariants. Both produce evidence files that can be uploaded above.

Mobile, bank/agency adapters, accounting, delivery & SSO

Operational integrations remain evidence-gated: a generated bank or agency artifact only becomes reusable as validated after the real external system accepts it and a different reviewer approves the evidence.

Mobile attendance policy

Geofence

Official-business review

Approved requests create synthetic, auditable time events and still pass through attendance normalization.

Onboarding / offboarding

Payslip delivery

Email is notification-only; salary amounts and attachments stay in the secure ESS portal.

Bank Format Studio

Government Format Studio

Acceptance evidence

Validated format learning library

Real accepted bank and agency profiles remain private by default. After external acceptance, the system creates a private candidate. An owner may consent to contribute only the sanitized layout structure; internal curation is required before anything becomes a reusable library entry.

Accounting integrations

Enterprise SSO

Configure the SAML provider in Supabase Auth first. Enforcement can only be activated from a real SAML-authenticated AAL2 owner session.

Go-live project + support evidence

Make implementation observable: data migration, parallel payroll, external validation, security proof, training and go-live sign-off live in one checklist. Support tickets can carry a payroll run/employee diagnostic snapshot without granting silent support impersonation.

Start implementation

Open support ticket

Billing, reliability & field proof

Subscription entitlements are enforced server-side. Durable jobs keep integrations moving without an open browser, operational failures become alerts, and practitioner/device proof can feed customer exceptions into Regression Lab.

Subscription & invoices

Recent invoices

Commercial billing statements are not represented as BIR tax invoices until the business has configured its actual tax-invoicing requirements.

Observability & alerts

Open alerts

Durable jobs & dead-letter queue

Jobs are claimed with row locks, get numbered attempts and exponential retry, then move to dead-letter after their retry budget is exhausted.

Recurring schedules

PH payroll practitioner sign-off

16 payroll topics are reviewed against the current ruleset. Any failed/follow-up topic must link representative payroll evidence, so the issue enters the exception → resolved golden-fixture → Regression Lab pipeline.

Biometric field mileage lab

Exercise actual LAN/CSV/cloud/mobile/overnight environments against missing OUT, duplicate IN, bad clock, offline/late sync, unmapped employees, overnight shifts and multiple breaks.

Operate payroll as a service without weakening release controls

Accountants and payroll operators can collect inputs, normalize time, calculate, review variances, prepare release packs and statutory close. The client still owns approval and money movement.

Start / connect service

Use an accountant/practice organization as provider. The provider must already have an active client relationship or client membership.

New payroll cycle

Managed payroll work queue

Hire into the same employee + onboarding record

Publish jobs, collect applicants, move them through the pipeline, then convert a hire into an employee and onboarding checklist—without re-keying HRIS data.

Create job

Open roles

Candidate pipeline

Interview scheduling

Schedule interviews against the candidate record and keep panel, meeting and status evidence with the recruitment timeline.

Digital offer and e-signature

Issue a versioned offer with an expiring candidate link. Acceptance records consent, signer, timestamp and evidence hashes without exposing the offer token in storage.

Goals and reviews that do not silently change payroll

Run review cycles, track measurable goals and create compensation recommendations. Salary/pay decisions remain a separate controlled payroll action.

Performance cycle

Add goal

Cycles & reviews

OKRs

Create an objective with measurable key results. Progress rolls up from the latest key-result values while the review cycle remains the reporting boundary.

360° feedback

Request structured feedback from peers, direct reports and cross-functional partners. Individual responses remain separate from the final manager decision.

Simple compliance and skills learning inside ESS

Create courses, assign them to employees and track completion. Mandatory courses can sit beside onboarding/offboarding evidence instead of becoming a separate HR silo.

Create course

Assign course

Learning dashboard

Security & production readiness

Tenant isolation, least-privilege ESS access, maker-checker controls, MFA gates and restore drills are built into the deployment model. Live evidence only becomes valid after deployment.

Deployment controls

MFA policy

Production privileged actions require Supabase Auth AAL2 for owners, payroll admins, makers and checkers. Employees may use normal authenticated sessions for own ESS data.

Backup & recovery

Deployment runbook includes automated database backups, encrypted export storage, restore verification and an auditable quarterly recovery drill.

Philippine payroll rulebook

Every calculated run carries a ruleset ID so historical payroll can be reproduced when statutory rules change.

Current configured constants

Safety controls

Contribution applicability is explicit. Statutory premium minimums are not user-editable. Approved payroll is immutable in the production schema. BIR outputs are preparation worksheets until current filing formats are validated. MWE supplementary compensation remains a high-severity review case.

Pay component rule builder

Assign component

Effective-dated compensation

Changes are proposed by a maker and approved by a different privileged reviewer. Mid-period changes are prorated into period_basic while the effective monthly salary remains traceable.

Unified employee / manager approval inbox

OT, attendance corrections, expense claims and compensation changes use one decision surface and write approval evidence.

Shift pattern planner

Publish shift plan

Claims & reimbursements

Approved payroll reimbursements generate a non-taxable one-off pay component with statutory-inclusion flags disabled and a source link back to the claim.

Effective-dated organization structure and workforce intelligence.

Branches, departments, positions, reporting lines, movements, custom employee data and HR forms are modeled as first-class records. Movement approvals preserve history instead of overwriting the employee profile.

Branches

Departments

Positions

Employee movements

Promotions, transfers, manager changes and other movements are effective-dated and maker-checker approved.

Live org chart

Built from the assignment effective on today's date and manager reporting line.

Custom employee fields

Custom HR forms

Headcount by department

Ask in plain language. Every factual payroll answer stays tied to evidence.

The assistant uses the current calculation, Explain Every Peso graph, prior immutable runs, effective org assignment and workflow context. It labels unsupported answers as partial or insufficient instead of guessing.

Cited evidence

Talent integration contracts

Recruitment, performance and LMS depth stays demand-driven. This layer queues provider-neutral events without claiming an external system is connected before an adapter is verified.

Integration outbox

Queued events are evidence that an integration handoff is pending—not proof that a third party received it.

Turn deterministic payroll truth into proactive insight and a developer product.

Cutoff narration and forecasting are deterministic decompositions over payroll evidence. The public API returns versioned ruleset IDs plus request/response hashes and never silently changes a pinned ruleset.

Year-end payroll exposure

Forecast 13th-month liability and policy-dependent leave-conversion exposure from YTD payroll and current compensation.

Public payroll API

POST /functions/v1/payroll-api · header x-psp-api-key. Actions: calculate, validate, statutory, explain. Raw keys are shown once and stored only as SHA-256 hashes.

Metered API usage

Usage logs keep request/response hashes, row counts, ruleset IDs, latency and status—not raw payroll payloads.

Match what payroll expected against what the agency statement actually says.

SSS, PhilHealth and Pag-IBIG statement reconciliation is line-by-line and evidence-bound. A perfect reconciliation can be independently closed, but it never masquerades as external filing/remittance acceptance.

Import statement

Line-by-line reconciliation

Reconciliation history

Detect official-source changes, draft a rule diff, then prove the impact before humans approve it.

Monitors are restricted to approved Philippine government HTTPS domains. A detected change can auto-create a draft proposal only when a configured extraction template fully matches; publication still requires existing dual review and Regression Lab gates.

Official-source monitor

Monitored sources

Detected changes & draft proposals

Customer impact simulations

Simulations replay immutable customer payroll runs under the draft ruleset. They do not mark the proposal publishable.

Employer-funded earned wage access + channel-neutral conversational ESS.

EWA is disabled by default, zero-fee and zero-interest by schema, and cannot be enabled without MFA/AAL2 plus a recorded counsel approval reference/date and the exact employee consent text. Messaging channels link with one-time codes and store external user identifiers only as SHA-256 hashes.

Employer-funded earned wage access policy

The drawable balance is a conservative ceiling from vested attendance earnings minus statutory/tax, known deductions, open advances and a safety reserve. It is not represented as final payroll.

Advance operations

Employee requests require a fresh quote and current written authorization. Approval is independent; funding requires an external employer funding reference. Recovery becomes paid only when a paid payroll run contains the source-linked deduction.

Conversational ESS channels

Employee-initiated one-time link codes activate Viber, Messenger or a generic signed adapter. The bot can answer limited self-service questions and route actions without exposing other employees.

Channel deployment contract

Provider secrets stay in Edge Function environment variables. Full payslip documents are not pushed into chat; sensitive documents remain behind authenticated portal links.

Registered legal entities

Add another payer entity

Assign employee payer

Salary grades & compa-ratio

Position band

Employee compa-ratio

HMO / benefits administration

Premium tier

Benefit enrollment approvals

Approved employee premium shares become source-linked monthly payroll deductions; payroll frequency conversion happens in the authoritative pay-config layer.

HR-initiated enrollment

Contractors / consultants · EWT

Reviewed withholding profile

Contractor payment & 2307

Prepare BIR 2307

Native/generated PDF payslips

PDF bytes are generated directly. Live downloads are authorized from approved payroll items; demo downloads are built locally from the current calculation.

Workflow & form builder

Define a trigger, approval steps and the fields employees or managers must complete.

Custom & scheduled reports

Choose a dataset and columns, then run now or schedule delivery.

HR case management

Keep employee relations, grievances and disciplinary matters confidential, assigned and auditable.

Case chronology

Add a private note, interview, action or resolution to an existing case.

Engagement & communication

Run surveys, publish announcements and prove policy receipt.

Compensation cycles & salary bands

Plan increases against effective-dated bands with a visible budget and approval status.

Employee salary proposals

Keep the cycle budget, current salary, proposed salary and rationale together for review.

Competency, probation & development

Track expected capability, probation milestones and a practical development objective.

Structured recruitment

Standardize candidate evaluation, reusable communication and employee referrals without losing the existing ATS pipeline.

Production proof passport

Submit external evidence

Second-person proof review

Stronger mobile attendance policy

Selfie evidence improves accountability but is not marketed as certified liveness. Certified liveness must come from an explicitly integrated external provider and separate proof.

Employee mobile devices

Mobile verification review

GPS/device policy misses are quarantined from timekeeping normalization until a different MFA-authenticated reviewer accepts them.

Formal service objectives

Status / health monitoring

An SLA is only presented as achieved when measurements exist. Missing health data remains unmeasured.