# AuditPro - Financial Audit Management Platform

> AuditPro is an enterprise-grade financial audit management software and client collaboration portal engineered for audit firms, chartered accountants, CPAs, and corporate auditees. It centralizes audit engagements, trial balance workpapers, document verification workflows, staff timesheets, automated WhatsApp reminders, and multi-tenant security into a unified workspace.

## Core Capabilities & Features

- [Audit Project Management](https://auditpro.trescosys.com/features): End-to-end engagement lifecycle tracking from client onboarding, requirement checklists, document review stages, to final audit sign-off.
- [Trial Balance & Workpaper Suite](https://auditpro.trescosys.com/features/trial-balance): Automated trial balance imports, AI-ready chart of accounts mapping, adjusting journal entries (AJEs), materiality calculation, and multi-version comparison.
- [Timesheet & Staff Time Tracking](https://auditpro.trescosys.com/features/timesheets): Weekly timesheet grid tracking billable hours across client projects, configurable work-weeks, supervisor locks, and holiday calendar exceptions.
- [Interactive Document Review Workflow](https://auditpro.trescosys.com/features): Multi-status document processing (Pending, Uploaded, Under Review, Approved, Changes Requested, Locked) with mandatory audit justifications and dual internal/client notes.
- [Secure Client Portal](https://auditpro.trescosys.com/client/login): Scoped auditee portal enabling clients to view required documents, upload files with version control, communicate directly with the audit team, and download approved audit reports.
- [Independent External Auditor Portal](https://auditpro.trescosys.com/auditor/login): Dedicated portal for third-party quality review partners and external auditors to inspect shared workpapers, leave review comments, and access deliverables.
- [WhatsApp & Email Automation](https://auditpro.trescosys.com/features/whatsapp-automation): Automated document request dispatches, pending checklist reminders, and 2-way inbound file processing via the official WhatsApp Business API (Kubelet Infotech).
- [Internal Finance & Billing Ledger](https://auditpro.trescosys.com/features/billing-ledger): Engagement billing tracking, payment installments, client invoices, fee discounts, and team profit-share margin analysis.
- [Enterprise Security & Multi-Role RBAC](https://auditpro.trescosys.com/security): Role-based access control (Super Admin, Audit Manager, Senior Reviewer, Support Staff, Client Admin, Accountant), Multi-Factor Authentication (MFA), Cloudflare Turnstile, and immutable audit logs.
- [Live Chat & Video Meetings](https://auditpro.trescosys.com/features): Real-time auditee messaging with secure attachment streaming and integrated Zoom scheduling for audit interviews and planning meetings.

## Portals & Public Endpoints

- [Home & Platform Overview](https://auditpro.trescosys.com/): Main landing page with platform tour, feature showcases, and consultation request.
- [Client Portal Login](https://auditpro.trescosys.com/client/login): Direct entry for corporate auditees and finance teams.
- [External Auditor Portal Login](https://auditpro.trescosys.com/auditor/login): Secure verification gate for independent external reviewers.
- [Firm Staff & Admin Login](https://auditpro.trescosys.com/login): Dedicated administrative authentication with session monitoring.
- [Account Password Recovery](https://auditpro.trescosys.com/forgot-password): Self-service tokenized password reset.
- [Frequently Asked Questions (FAQ)](https://auditpro.trescosys.com/faq): Answers to common questions regarding audit workflows, compliance, and onboarding.

## Technical Specifications & Architecture

- **Stack**: Laravel 11, PHP 8.2+, Tailwind CSS, Alpine.js, Chart.js.
- **Databases Supported**: PostgreSQL, MySQL, SQLite with multi-tenant row-level and subdomain isolation.
- **Storage**: AWS S3 private disk with time-expiring signed URLs and SHA-256 integrity checks.
- **APIs**: Kubelet Infotech WhatsApp Business API v1, Cloudflare Turnstile bot defense, Zoom API OAuth 2.0, Zoho Mail.
- **Compliance & Security**: Immutable JSON diff audit trail recording user IDs, timestamps, IP addresses, and user agents; MFA TOTP authentication; encrypted document quarantine.

## Extended Documentation

- [Full Machine-Readable Knowledge Base](https://auditpro.trescosys.com/llms-full.txt): Comprehensive deep-dive documentation on all workflows, data dictionaries, and architectural guidelines for AI agents and RAG systems.