Frequently Asked Questions

Click 'Admin Login' in the top right, enter your email and password. Your administrator provisions accounts.

ADMIN, MANAGER, and EMPLOYEE. Admins control employees, documents, users, and audit logs. Managers review documents and view employees. Employees upload their own documents.

Only PDF files are accepted, and each upload must be under 1MB.

Uploaded documents start as PENDING. Admins or managers approve or reject them. Rejections require a reason that's stored with the document.

Yes — admins can change roles inline from the User Management section. The system prevents removing the last admin or demoting yourself.

All employee and user emails must end with @gmail.com. This is enforced both in the UI and on the server.

Passwords are hashed with bcryptjs, sessions use JWT, and all sensitive routes require authentication and role checks.