Document Request Platform.

The firm collected sensitive financial documents from dozens of audit clients each cycle, mostly over email and shared folders. The process was hard to audit, easy to misplace, and a compliance liability. They needed a structured platform: one place where each audit client could see exactly which documents were requested, upload them securely, see comments, and watch the status change as the audit team accepted or returned each file.

A web-based document-request platform with three roles (audit staff, administrators, audit clients), full activity logging, password reset flows with audit history, and a CRM-shaped client directory. Each engagement becomes a "project" with a sworn auditor, an audit period, a deadline, and a categorised list of required documents grouped by company structure.

Audit clients see only their own project; they can upload files into the requested categories, leave comments, and mark categories as not applicable. The audit team accepts or rejects each upload with feedback. Once a document is accepted, a background sync pushes it into the firm's internal network over FTP every five minutes — into a structured folder tree with a working copy and a read-only original, so the existing audit workflow doesn't change.

Built on PHP, MySQL, and Apache (the stack the firm's internal infrastructure already supported), with Let's Encrypt SSL renewed quarterly, SQL-injection and XSS protections, and UTF-8 throughout. Responsive UI on the Metronics framework so audit clients can use it from the laptop they happen to have open.

Replaced the email-and-shared-folder workflow with a single audited platform. The audit team sees the status of every requested document at a glance; clients stop asking "what do you still need from me?". The two-year warranty and ongoing hosting contract (99.9% SLA, daily backups, monthly support hours) cover the platform end-to-end.