For your team

Trace any transaction from the receipt to the bank.

Every step a payment takes leaves a record: who did it, when, and the evidence. Here is one receipt, followed all the way through.

TraceR-000021: funeral premium, policy FP-118 204, P 155.00

Time	What happened	Who	Evidence
09:41	Quote issued	Teller 2	P 150.00 plus a P 5.00 fee
09:43	Payment taken	Teller 2	Cash, P 155.00, reference P-7731
09:43	Ledger posted	Platform	3 lines, debits equal credits
09:43	Receipt printed	Teller 2	R-000021
18:05	Till closed	Supervisor 1	Variance P 0.00, signed off
02:10	Settled to the insurer	Platform	Nightly file, P 150.00, against the policy
06:30	Matched to the bank	Platform	Three ways, variance P 0.00

Seven controls, and the evidence each one leaves.

Control	How it works	Evidence it leaves
Deny by default	Nothing is allowed unless a role permits it, checked on the server for every request.	Each decision, in the audit trail.
Two people on risky moves	Publishing a service, taking a provider live, reversals, rebalances and admin grants need a second, different person.	The request and the approval, each from its own login.
Every change recorded	Who, when, what changed and why, for every change to money, catalog and access.	The audit trail, kept with the data.
One posting per payment	A retried or repeated request finds the first attempt, so money moves once.	A reference on every payment.
Books in balance	Every movement recorded twice, and the books checked through the day.	A trial balance at P 0.00, any hour.
Operators kept apart	Each operator's data isolated in the database itself.	Isolation tests in every release.
The bank as the third leg	The settlement bank's statement matched daily against counters and providers.	The daily match and its exceptions.

Can a teller reverse their own transaction?

A teller can ask for a reversal. A supervisor, a different person, approves it later from their own login.

Can an administrator change a price quietly?

A price change is a new catalog version. It needs a second approver to publish, and both people are recorded.

What if the connection drops mid-payment?

The payment carries a reference, so a retry finds the first attempt. An unconfirmed outcome shows as pending until the provider answers.

Who can see another outlet's figures?

Only the roles that cover that outlet. A teller sees their own counter.

Where is the data kept?

In-country on a dedicated instance where regulation asks for it, or on the shared platform with each operator isolated.

Can a teller see the expected cash before counting?

The expected figure stays hidden from the counter until the teller has entered the count, and the platform enforces it.

Every control on this page can be shown working, on your services and your partners.