Live sandbox open Try TaviPay right now · No signup, no booking — open the live demo and click around. Open the demo →
Module · Workflow Engine & E-Sign

Every people decision, with an approval trail.

The Workflow Engine is the audit-friendly backbone of TaviPay. Every legally significant people event — hiring, paying more, changing terms, ending employment — is routed to the right approvers, captured with a signature, and filed against the worker. Nothing happens silently.

Try it in the demo See HR Management
Four workflow types

One engine. Four flows. Every people decision.

Offer Letters

Pick a position, fill in the candidate's details, and the system generates a branded PDF with the role's Schedule A job description attached. Routes through HR Manager → Payroll Approver. Signed scan files straight to the new hire's Document Vault as CONTRACT.

Rate Changes

Pay rate changes go through the workflow, not directly to the employee record. Current rate auto-populated, new rate captured, percent change shown, effective date set, reason recorded. Posts to payroll on approval.

Contract Variations

Role change, department move, hours adjustment, reporting line update, location change. Pick the fields that are changing, set the effective date, route for sign-off, generate the variation letter with the original contract on file.

Terminations

Resignation, dismissal, redundancy, end-of-contract. Final-pay computation, outstanding-loan warnings, notice period, exit interview, eligibility for rehire — all captured, routed, and locked. ERA-compliant by construction.

How it works

A state machine you can actually trust.

The states

  • DRAFT — Initiator is still composing. Edit, withdraw, or submit when ready.
  • PENDING — Out for approval. Routed to step 1's approver. Each approval moves to the next step.
  • AWAITING_SIGNATURE — All steps approved. PDF generated. Upload the signed scan here.
  • COMPLETED — Signed copy filed in vault. Event posted to downstream systems (payroll, document store, audit log).
  • WITHDRAWN / REJECTED — Stopped before completion. Reason recorded. Permanent record.

Built-in guardrails

  • Separation of duties — The system blocks you from approving a workflow you initiated. Always.
  • Optimistic version locking — Two approvers can't accidentally act on the same step in parallel.
  • Field-level redaction — Sensitive payload fields (salary, redundancy amount) only visible to roles authorised to see them.
  • Idempotency keys — Network hiccups don't create duplicate workflows. Retries are safe.
  • Immutable events — Every state change is appended to an event log that cannot be edited or deleted.
Tenant-editable routing

Your org chart isn't ours. Configure it yourself.

From the Admin panel, configure exactly who approves what — with what SLA — for each workflow type. No code changes when people move or roles shift.

Per-type routing

Different approval chains for offer letters versus terminations versus rate changes. Each workflow type configurable independently.

SLA enforcement

Set a deadline per step (24h, 48h, custom). Overdue items badged red in the approver's Inbox. Auto-escalation on the roadmap.

Multi-step chains

Single approver, two-stage (HR then Payroll), three-stage (HR, Payroll, Owner) — set as many steps as your governance requires.

Role-based assignment

Assign to roles, not individuals. As your people change, the workflow automatically routes to whoever currently holds the role.

Delegation

An approver going on leave can delegate to a colleague for the duration. The Inbox shows the delegated item with a clear "delegated to you" badge.

Step reassignment

Admin can reassign a step to a different user if the original approver is unavailable. Reassignment is recorded in the audit log.

E-signature

Wet sig today. M365 / DocuSign next.

Live now: wet-signature flow

On final approval, the system generates the formal PDF (offer letter, variation letter, termination notice) with company letterhead, FJ$ formatting, and signature blocks. The initiator downloads, gets it signed (wet ink), and uploads the scan back. The signed copy is filed in the worker's Document Vault under the correct category. Workflow flips to COMPLETED.

Coming next: native e-signature

M365 Graph signing and DocuSign integration are next on the roadmap. Same workflow — but the document goes out for digital signature, the signed copy returns automatically, and the workflow advances without anyone touching a printer. The wet-sig path stays available as a fallback for tenants who need it.

See it run in the live sandbox.

An Offer Letter, a Rate Change, and a Termination are already pre-loaded in the demo — some pending, some completed. Approve them, reject them, edit drafts, watch the audit trail.