Integrations
Connected where it counts — honest about the rest
Every integration below is described exactly as it exists in the product today: what is live, what is configuration, and what is not built yet.
HPAI — Google Gemini
The HPAI assistant is powered by a single Google Gemini provider, configured with your own API key in Super Admin. Requests are role-scoped, rate-limited (30/hour/IP), length-capped and time-boxed; when the key is absent the assistant returns an honest "not configured" error instead of a canned answer.
Configuration: Super Admin → AI Configuration
Payment gateways
Clients can pay a sent or overdue invoice online via Razorpay: an order is created server-side, the invoice is marked paid only after Razorpay's webhook verifies the payment signature — never by the checkout redirect alone. UPI and bank-detail records for other gateways remain configuration-only (masked on read-back) until the same verified-payment pattern is built for them.
Configuration: Super Admin → Payment Gateways
Public careers & job API
Your public careers page and its application flow are served by the public jobs and applications API, so your careers site, job syndication and this portal all read the same live requisitions without manual re-entry.
Endpoint: /api/public/careers
Document & selfie storage
Attendance selfies and generated documents are stored on the deployment filesystem, with per-role access control on retrieval. On serverless hosting the platform reports an explicit "storage not configured" error for captures rather than silently dropping evidence.
Roadmap: object storage for serverless deployments
Security headers & session layer
Every response ships strict security headers (DENY framing, nosniff, HSTS preload, no-store on API routes) and the portal uses httpOnly, sameSite JWT sessions with per-tenant scoping — the contract your SSO or proxy layer integrates against.
Contract: cookie session + JSON API
ERP & accounting connectors
SAP, Tally, Zoho and similar connectors are not implemented. We would rather say that plainly than list logos. If a payroll export or API integration is on your critical path, tell us — the export layer is where it would begin.
Available today: CSV exports for attendance and reports
Need an integration we have not built?
Tell us what is on your critical path. We prioritise integrations that real tenants ask for, and we will always tell you plainly what exists, what is in progress, and what is not on the roadmap.
Talk to us