Good Morning, Sthiti Admin
Pre-Arrival Confirmations
Materials / vendors due on site within 3 days · responsible employee must confirmConstruction Alerts
Arrival or end dates that have slippedAt-Risk Projects & Tasks
Green = on track, Amber = close, Red = overdueActivity Log
DEMOToday's Work Grid
Deadlines
Meeting Schedule
Khan Legacy
Progress by Phase
Design Phase — 7 Tasks
Real data · click Manage to assign, update, attach files, or comment. "Clients Meeting Update" has its own Meeting Log.Bill of Quantities
Time Schedule
Gantt View
Construction
Cost Summary
Cost Position
Ordered, delivered, certified and paid are four different numbersVendor Ledger
What each vendor is owed on this projectClient Account — open book
Mobilization Cost — employee-wise
Access-controlled in production: Admin-granted employees onlyBy Stage
Cost by Work
Budget against actual, line by line
Site Photos
Dated progress gallery — before/after comparison for the clientInterior Projects
Schedule Builder
Programme
Site visits
One tap on arrival, one on leaving · name and time filled in automaticallyDaily progress — today
The quantity entered here is what sets percent complete on the programmeRevision history
Contract & Site Registers
Variation orders
Extra or omitted work, numbered, with its effect on money and on timeClient running bill
Interim payment certificate — work done, less retention and advance, plus VATTax deducted at source
VDS and AIT withheld from vendor bills, waiting to be depositedMaterial reconciliation
What the BOQ says should have been bought, against what actually wasMaterial & sample approvals
Requests for information
Work inspection requests
Snag list
Money
Money in — from the client
Each entry gets a receipt number you can hand overMoney out — to vendors
Gross, retention, tax at source, and what actually reached the vendorWork orders
The written instruction to a vendor, before the work startsDocuments
Sent out of the office
Vendor Master List
MD Dashboard
Projects — cost, earning and what clients still owe
Only the MD sees this table · turn-key earns 10% on cost, consultancy earns a 7% feeOffice running costs
What the office costs to keep open each month — this is the figure subtracted from earning to give the net positionUpcoming / Pipeline Projects
DEMOBusiness Health Panel
Rule-based — computed live from this app's own data, not guesswork. A real Claude-powered advisor is planned for the production build.Business Development
Lead Pipeline
A lead with no next action is a lead you will lose — the app forces oneDormant Client Reactivation
Your cheapest source of new workWin / Loss Analysis
Why proposals were lost — the pattern tells you what to changePartner / Broker Network
Who actually brings work inTender Watch (e-GP)
Entered manually after checking eprocure.gov.bdSite Signboard QR Marketing
Every running site becomes an advertisementFeed & Notice Board
Write a Post
Goes to Admin for approval firstNotice Board
Pending Approval
Admin onlyInbox
Folders
Project File Folders
Inbox
Employees
Pending Approvals
CV, photo and signature
A signature prints only on documents that person has approved · every change is loggedSignatures on printed documents
One, two or three lines · you choose the wording and the person for eachSalary & Attendance
Today's Attendance — 02 August 2026
DEMORule: unauthorized full-day absence (no approved leave) results in a full day's salary deduction and is flagged as "Unauthorized Absence" in the monthly report. Weekly offs and gazetted holidays are excluded from this — but only from the Admin-controlled holiday calendar, so no one can declare their own extra day off.
Late Logins This Month
DEMORule: logging in after the 10:15 / 2:15 grace window counts as late. From the 3rd late day in a month, that day's salary is cut in half.
Early Logout — Pending Approval
DEMOOvertime Log
DEMORule: overtime hours only count toward pay once Admin approves the request — so no one can log arbitrary hours for extra pay.
Leave Types (per Bangladesh Labour Act)
Leave-wise Salary Calculator
Pick an employee and base salary — the breakdown updates livePayment History
Team Access
Current Access Roles
Real dataPending Access Requests (Onboarding)
DEMOSecurity & CCTV
Live 360° Cameras — 6 Rooms
Illustrative — real feed appears after hardware installLocation & Movement Tracking
Illustrative mapThis tracking runs under your written consent policy — only during office hours (login to logout), nothing is recorded outside that window. Each login is checked against the office geofence, and a login from outside it is flagged to Admin so attendance cannot be faked from off-site.
Application Security Standards
What protects this system against hacking- XSS protection — every user-typed value (vendor names, materials, comments, notes) is escaped before rendering, so pasted
<script>code can never execute - No external data calls — the preview keeps all data in-page; nothing is sent anywhere
- Password hashing (bcrypt/argon2) — passwords are never stored readable, even by Admin
- HTTPS/TLS everywhere — all traffic encrypted in transit
- Server-side role checks — every request re-verifies the user's role (MD/Admin/Employee); hiding a button is never the only barrier
- SQL-injection prevention — parameterized queries only
- Login rate-limiting + lockout — blocks password-guessing attacks
- Two-factor authentication for Admin & MD accounts
- Session expiry — idle sessions log out automatically
- Encrypted daily backups + full audit trail (who changed what, when)
- Signed, expiring file links — uploaded drawings/documents can't be opened from a leaked URL
Honest note: this HTML preview runs entirely in your browser and holds no real accounts or data, so there is nothing here to hack yet. The list on the right is the standard that will be enforced when the system moves to its production server — it is part of the build specification, not an afterthought.