| Every employeeTheir own record, on a phone. | File leave, record attendance, claim expenses, request documents, read their own payslips, view and download their own Personal Data Sheet, browse the staff directory. | See anyone else's payslip, personal sheet or records. Reach any HR administration screen at all. |
| SupervisorsTheir own record, plus the people who report to them. | Everything an employee can, plus decide the requests of their own direct reports and see a team list. | Decide requests belonging to staff who do not report to them. Reach HR administration screens. |
| HR staffThe HR queues. | Work document requests, feedback, the plantilla register, training and HR reporting, plus the Salary Register, the annual BIR filings, the contributions register and the executive dashboard. | Open or run a payroll cycle. The runs themselves are walled off from general HR staff deliberately, and we test that they stay walled off. |
| HR managementThe full HR function, including running payroll. | Everything above, plus the payroll cycle itself: selecting employees, generating slips and disbursing. | Escape the audit log. Every export and print is recorded against the account that did it. |
| Dakila, under the support agreementThe server, for deployment, upgrades, backup and monitoring. Not a desk in the flows below. | Deploy and configure the system, apply version upgrades in maintenance windows your office schedules, configure backups and test restores, read the health, patch and access logs. | Reach the machine except through the administrative access path your network office operates, the same restriction your own administrators work under. Act outside the audit trail: the platform records activity, access and patches against the account that acted, and those logs are readable by your agency's own IT administrators. The administrator credential is generated at installation and stored in your agency's vault. |