Manage budgets, spend and revenue across every site.
- Track budget vs actual per site, department and category.
- Capture expenses, route them through approval workflows, recover rechargeable margin.
- Generate site, portfolio and client-facing reports on demand.
- Every action audited, with role-aware visibility on commercial data.
What you can do
Manage companies and sites
Onboard a client, add the sites they operate, set the financial year, contract model, currency and chargeback margin per site.
Set and profile budgets
Enter annual budgets per site, department and category. Auto-allocate monthly, or override for seasonal weighting. Compare across financial years.
Capture expenses
Log every cost against a site with supplier, invoice, attachments and cost allocation: scoped, general, unscoped, or rechargeable.
Route through approvals
Configure rules by scope, threshold, cost type and rechargeable flag. Approve, reject or query from one page. Reminders chase pending items.
Generate reports
Site, portfolio, client-facing branded and monthly export pack — PDF or Excel. Schedule recurring delivery to a mailing list.
Audit every change
Sign-ins, budget edits, expense lifecycle, approval decisions, configuration. Actor, timestamp, IP, before and after values. Queryable.
Track budget vs spend, monthly
Set thresholds for watch and breach. Every aggregate drills into the records that produced it.
Show or hide margin per role
Site Managers see budget, spend and variance. Finance Admins see margin, charge rates and profitability. The same expense, two surfaces.
- Scope users to companies and sites they own.
- Hide finance-only fields completely — never as a placeholder.
- Every role change is written to the audit log.
- Amount
- £28,400.00
- Allocation
- Rechargeable
- Variance vs forecast
- +6.7%
- Amount
- £28,400.00
- Allocation
- Rechargeable
- Variance vs forecast
- +6.7%
- Margin
- 6.0%
- Chargeback
- £30,104.00
- Profitability
- +£1,704.00
Security and compliance
Sign in with MFA
Password plus a 6-digit code from any authenticator app. Recovery codes for lost devices.
Enforce strong passwords
12-character minimum, breach-list check, password history. Self-service reset by email.
Encrypt data at rest
AES-256 on database, backups and object storage. Cloud KMS-managed keys with rotation.
Encrypt data in transit
TLS 1.2 minimum, 1.3 preferred. HSTS, HTTP redirects to HTTPS.
Isolate tenants
Every query filtered by tenant. Mismatched tenant returns 404, never reveals existence.
Audit every action
Sign-ins, budgets, expenses, approvals, reports, config. Actor, IP, before and after values.
Respect UK GDPR
Personal data tagged, least-privilege access, data export, pseudonymised deletion. UK or EU regions only.
Meet WCAG 2.1 AA
Keyboard parity, focus rings, colour plus icon and text on every signal.