F-Portal
Internal system of record for Fortis budgets, expenses, approvals and reporting across every site. Staff access only.
- Site budgets, spend and variance, by department.
- Expense entry and approval routing.
- Site, portfolio and client reporting.
- Role-based access, fully audited.
What's in the portal
Companies and sites
Client companies and the sites they operate. Financial year, contract model, currency and chargeback margin per site.
Budgets
Annual budgets by site, department and category, allocated monthly and comparable across financial years.
Expenses
Costs logged against a site with supplier, invoice, attachments and cost allocation.
Approvals
Approval routing by scope, threshold and cost type. Approve, reject or query in one place.
Reporting
Site, portfolio and client-facing reports, scheduled or on demand.
Audit log
Sign-ins, budget edits, expense lifecycle, approvals and configuration changes, all recorded.
Budget vs spend, monthly
Watch and breach thresholds per site. Every figure drills into the records behind it.
Access by role
Site Managers see budget, spend and variance. Finance Admins also see margin, charge rates and profitability.
- Scope users to companies and sites they own.
- Hide finance-only fields completely — never as a placeholder.
- Every role change is written to the audit log.
- Amount
- £28,400.00
- Allocation
- Rechargeable
- Variance vs forecast
- +6.7%
- Amount
- £28,400.00
- Allocation
- Rechargeable
- Variance vs forecast
- +6.7%
- Margin
- 6.0%
- Chargeback
- £30,104.00
- Profitability
- +£1,704.00
Security and compliance
Sign in with MFA
Password plus a 6-digit code from any authenticator app. Recovery codes for lost devices.
Enforce strong passwords
12-character minimum, breach-list check, password history. Self-service reset by email.
Encrypt data at rest
AES-256 on database, backups and object storage. Cloud KMS-managed keys with rotation.
Encrypt data in transit
TLS 1.2 minimum, 1.3 preferred. HSTS, HTTP redirects to HTTPS.
Isolate tenants
Every query filtered by tenant. Mismatched tenant returns 404, never reveals existence.
Audit every action
Sign-ins, budgets, expenses, approvals, reports, config. Actor, IP, before and after values.
Respect UK GDPR
Personal data tagged, least-privilege access, data export, pseudonymised deletion. UK or EU regions only.
Meet WCAG 2.1 AA
Keyboard parity, focus rings, colour plus icon and text on every signal.