01 · Document Workflow Management
The full lifecycle, tracked end to end
- Multi-stage review and approval workflows with configurable routing
- Document versioning with complete revision history
- Automated notifications at every stage transition
- Analytics dashboard for workflow throughput and bottlenecks
- Status tracking from upload through publishing and archival
Draft
Review
Approved
Published
Archived
02 · Document Search & Management
Find any document, any way you look for it
- Advanced search with multiple, combinable filter options
- Dual grid engines (AG Grid and TanStack Table) for large datasets
- Document type management and categorization
- Bulk operations across selected document sets
- Organized download and sharing controls
03 · Training Management
SOP training, tied to the documents themselves
- SOP-based training scheduling and assignment
- Progress tracking across individuals and teams
- Compliance monitoring against training deadlines
- Training records retained alongside document history
- Direct integration with document publishing events
04 · User Management & RBAC
Access scoped to the org chart, not the honor system
- Comprehensive user management with profile handling
- Role-based access control with 40+ granular permissions
- Group management and organizational hierarchy
- Permission sets with inheritance
- User analytics and activity monitoring
05 · Audit Trail System
A record of everything, searchable in real time
Six categories are captured automatically across a working day. Nothing is opt-in, and nothing is written by the user.
Login
Session start and end, source, and failed attempts against the attempted username.
User Activity
Navigation and data operations, attributed to the acting account.
Password
Resets, policy changes, and expiry events, without ever recording the value.
Permissions
Grants and revocations, with the prior state retained for comparison.
Printing
Which controlled document was printed, by whom, and at which version.
Documents
Every stage transition, upload, supersede, and archival on the record.
06 · Authentication & Security
Secure by default, not by configuration
There is no hardening checklist to work through after install. These are the defaults.
JWT authentication
Token-based sessions with automated refresh, so a long working session never silently expires mid-approval.
CSRF protection
Cookie-based session persistence paired with CSRF tokens on state-changing requests.
Password policy
Configurable complexity, expiry, and reuse rules, with every change written to the password audit.
Session termination
Automated logout on inactivity, and explicit invalidation on the server rather than only clearing the client.