The Settings module centralizes all configuration for your tenant. Access is restricted — only Admin and Super Admin roles can modify most settings. Staff users see a limited view with personal profile and notification settings.

Settings are organized into tabs that vary by role. All changes are audited and logged for compliance.

Navigate to Settings in the sidebar. This is visible to all authenticated users, but the tabs you see depend on your role.

• Admins see 6 tabs: Company Info, User Management, Subscription, Notifications, Security, Audit Logs
• Staff see 3 tabs: My Profile, Notifications, Security
• Super Admin see 2 tabs: Security, Audit Logs

The Company Info tab (Admin only) lets you configure your organizationʼs identity. This information appears on invoices, email templates, and the application sidebar.

Fields

• Company Name — Displayed in the sidebar header and on all client-facing documents
• Tax ID — Your business tax identification number (appears on invoices)
• Address, Phone, Email — Contact details shown on invoices and email footers
• Logo — Upload a company logo (appears in sidebar and on invoices)

The User Management tab (Admin only) controls who can access your tenant and what they can do.

Active Employee List

Shows all employees who have user accounts. Each entry displays the employee name, email, role, and assigned modules.

Grant Access

Create a user account for an employee who doesnʼt have one yet. Select the employee, set their initial password, and assign a role (Staff, Manager, or Admin).

Edit Access

Configure per-module access for each user. Toggle individual modules on/off. For Staff users, this defines exactly which modules they can see and use. 21 modules are available: dashboard, leaves, crm, projects, invoices, expenses, clients, docs, meetings, chat, email, calls, inbox, leads, tasks, orders, team, accounting, purchasing, inventory.

Role Assignment

Change a userʼs role between Staff, Manager, and Admin. This affects their permission level across all modules.

Remove User

Revoke a userʼs access to the tenant. Their employee record is not deleted — only their login access is removed.

SMTP settings control how your tenant sends emails. This is required for invoices, meeting invitations, leave notifications, and email campaigns.

Configuration Fields

• Host — SMTP server address (e.g., smtp.gmail.com)
• Port — SMTP port (typically 587 for TLS, 465 for SSL)
• Username / Password — Authentication credentials (password is AES-256-GCM encrypted at rest)
• SSL/TLS — Choose between SSL, TLS, or no encryption
• From Name / From Email — The sender name and address that recipients see

Test Connection

After configuring SMTP, use the Test Connection button to verify that emails can be sent. A test email is dispatched to confirm your configuration works.

Important: Always test SMTP after setup. A misconfigured SMTP server is the #1 cause of email delivery failures.

The Notifications tab lets each user control which email notifications they receive. 11 system notification types are available:

• Leave Requests / Leave Approvals
• Expense submissions and approvals
• CRM milestones (lead won, client created)
• Invoice Paid notifications
• Meeting Scheduled alerts
• Project Assignment notifications
• Task Assignment alerts
• Digital Docs sharing notifications
• Client Portal activity

Each notification can be toggled on or off individually. Thereʼs also a master toggle for personal email notifications.

The Security tab is available to all users and contains three sections:

Password Change

Change your login password. Requires your current password for confirmation.

Multi-Factor Authentication (MFA)

Enable TOTP-based two-factor authentication for your account. Scan a QR code with your authenticator app, verify with a code, and store recovery codes securely. MFA adds an extra layer of security beyond your password.

Danger Zone

• Global Sign-Out — Sign out of all active sessions across all devices
• GDPR Data Export — Request a complete export of your personal data in compliance with GDPR
• Account Deletion — Permanently delete your user account. This is irreversible

Configure default invoice behavior and appearance. These settings apply to all new invoices.

Invoice Numbering

Set the invoice prefix (e.g., "INV-"), the next invoice number, and suffix. The system auto-increments numbers as invoices are created.

Defaults

• Currency — Choose from 10 currencies (USD, EUR, GBP, AUD, CAD, INR, JPY, CNY, CHF, HKD)
• Tax Rate — Default tax percentage applied to new invoices
• Payment Terms — Default terms text (e.g., "Net 30", "Due on Receipt")

Bank Details

Configure bank information that appears on invoices for payment instructions: Account Name, Account Number, Bank Name, Branch, Routing Number, SWIFT Code.

The Subscription tab (Admin only) shows your current plan, billing history, and payment methods.

Plan Information

View your current plan, module allowances, and user/project limits. Plans are managed through Stripe integration.

Subscription Actions

Cancel or renew your subscription. If your subscription is past due, non-admin users are redirected to the billing page until payment is resolved. Suspended or canceled tenants see a blocked workspace screen (except Super Admin).

The Audit Logs tab (Admin and Super Admin only) provides a complete, immutable history of every configuration change in your tenant.

Whatʼs Logged

Every settings change is recorded with: the user who made the change, timestamp, the setting that was changed, and before/after values. Export audit logs for compliance or external audits.

• Configure company branding and SMTP before sending any client-facing communications
• Test SMTP connection immediately after configuration
• Review user permissions periodically to ensure access is appropriate
• Enable MFA for all Admin users
• Use the audit log regularly to monitor configuration changes
• Keep billing information current to avoid service interruptions
• Set invoice numbering and bank details before generating your first invoice