Compliance backbone

The boring work, automated.

Lien waivers across all 51 jurisdictions with the right form, the right notarization, and the right deadline. Per-diem with federal-vs-excess split that posts correct payroll-tax flags. An alumni portal that gets your ex-employees their W-2s without copying you on six emails. An insurance renewal workflow that pings brokers, parses the quote PDFs, and ranks them.

51 jurisdictions 12 statutory-form states 10 notarize-any-variant states Blue Notary RON wired
Lien Waiver State Registry

All 51 jurisdictions. Maintained.

Every state plus DC, with the right statutory form (where one exists), the right notarization rule, the right advance-waiver rule, and the right deadline windows. AOS uses the jurisdiction registry to drive both the waiver flow and the lien-rights calendar from the moment a job opens.

Statutory form states
12 — AZ, CA, FL, GA, MA, MI, MO, MS, NC, NV, TX, UT. AOS picks the statutory form automatically; custom forms are blocked.
Notarize-any-variant states
10 — AK, HI, KS, MS, NE, OH, OK, VA, WV, WY. The notarization gate refuses to advance the waiver until Blue Notary confirms the remote-online-notarization session is complete.
Advance-waiver-void states
12 — waivers signed before payment is received are void by statute. AOS blocks the receive flow and surfaces the law to the user.
Lien rights tracker
6 deadline types — preliminary notice, NOI, NOC, filing, release, bond claim. Each deadline is calculated against the jurisdiction's own window — no per-state special cases in the rest of the system.
Duplicate-handling log
Tamper-resistant event log prevents double-counting when a waiver is rolled forward. Every state change writes a row.
Coverage map
ALAK ★AZ ✓ARCA ✓COCTDEDCFL ✓GA ✓HI ★IDILINIAKS ★KYLAMEMDMA ✓MI ✓MNMS ✓★MO ✓MTNE ★NV ✓NHNJNMNYNC ✓NDOH ★OK ★ORPARISCSDTNTX ✓UT ✓VTVA ★WAWV ★WIWY ★

statutory form · notarize-any-variant required · all 51 jurisdictions in scope · deadline windows live in the registry, not your code.

Per Diem

Federal-vs-excess, split at the line.

A real per-diem engine — not a spreadsheet. GSA federal high-low rates and OCONUS rates ingested per fiscal year. Disbursements auto-split into federal-allowable and excess portions; excess posts with the right OASDI / Medicare / FUTA / SUTA / WC flags downstream. Payroll bridge handles the dual pay-code generation.

  • Rate engine — federal high-low with state + locality search, OCONUS with country + locality.
  • Auto-split — a $250 disbursement in a $200 federal-rate locality posts $200 as federal-allowable and $50 as excess, on two pay-code rows, with the right tax flags on each.
  • Substantiation aging — receipts age into four buckets (0-30 / 31-60 / 61-90 / 90+ days); aged-out receipts feed back to payroll for cap-and-clawback.
  • Travel bridge — connects to the travel and per-diem engine so trip-derived per-diem amounts fold in automatically.
  • Fiscal-year rate refresh — Fiscal year 2026 high-low rates, the top-50 high-cost localities, and 20 OCONUS samples ship pre-loaded; rates refresh at the start of every fiscal year.
Disbursement split — $250 / Boston (high-cost)
PortionAmountPay codeWC
Federal-allowable$200PD-FEDNo
Excess$50PD-EXCYes
Substantiation aging — Q2 2026
Receipts still missing by age
0-30d31-60d61-90d90+ (clawback)
Alumni pay-history

Your payroll inbox goes quiet.

Ex-employees pull their own W-2s, pay stubs, certified payroll records, and YTD summaries through a secure one-click portal — for the full 7-year retention window. No more reset-password loops three years after termination. Each link type — invite, email-verify, and login — has its own secure key, so an invite link can never be re-used as a login.

  • Three separate secure keys, three expiration windows — invite link 14 days, email-verify 24 hours, login 30 minutes. Every link goes into a tamper-resistant log so it can only be used once.
  • Lifecycle — invited → personal email set → active → expired / revoked. Revocation is a manual override.
  • 7-year access window — counted from the termination date, with leap-day-safe math.
  • Every action logged — every view and every download is recorded in the alumni access log.
  • Onboarding handoff — the termination wizard creates the alumni account and sends the invite link.
Alumni portal — Jane Doe (terminated 2023-08-14)
W-2 — 2025Available
W-2 — 2024Available
W-2 — 2023 (partial year)Available
Pay stubs — 202314 stubs
Certified payroll — Westside Tower7 weeks
YTD summary — 2023Generated
Access expires2030-08-14
Insurance auto-renewal

Brokers, on a scheduled runner.

A renewal workflow that pings every broker on the policy at 90, 60, 30, and 14 days out — de-duplicated so they don't get the same email twice. Quote PDFs come back; an AI parser extracts premium, limits, deductible, and effective date with a confidence score (zero-confidence rows go to manual review). The compare view ranks by premium, breaks ties on limits, then deductible.

  • Scheduled runner — a scheduled job that pings each broker, skips brokers already contacted in this window, and handles email bounces.
  • AI quote parser — reads broker quote PDFs, scores its confidence per field, and holds zero-confidence quotes for human review.
  • Compare engine — ranks by premium first, then limits, then deductible — always in the same order.
  • 4 brokers seeded — Hub, Marsh, Travelers, USI; your own brokers added during onboarding.
  • Email bridge — broker quotes land in a shared inbox; AOS routes each one to the right RFQ by its ID.
Renewal compare — GL policy 2026-2027
BrokerPremiumLimitsConf
Hub$48,200$2M / $4M0.94
Marsh$51,800$2M / $4M0.91
Travelers$54,200$2M / $4M0.62
USI0.00
Apparent lowManual reviewUnparseable
ITAM cross-module retrofit

The asset shows up where the work is.

A real IT asset registry wired into the rest of the platform — not a sidecar nobody opens. The helpdesk ticket shows the related asset. HR profile shows what's still in this worker's name. Onboarding auto-opens a checkout request for the right laptop, the right badge, the right gas card. Termination shows what hasn't come back.

Helpdesk

Related Asset panel

Open a ticket about "laptop won't connect"; the ticket auto-links the user's assigned laptop and pulls model, age, and last patch.

HR

Worker assigned-assets

HR profile shows every asset assigned to this worker, joined by case-insensitive email — same person, same view, regardless of caps.

Onboarding

Auto checkout requests

For four IT asset codes (laptop, phone, badge, gas card) onboarding dispatcher auto-opens a checkout request. The asset is on the new hire's desk by day one.

Owner renewal

Warranty + license alerts

90/60/30/7-day windowed alerts surface in the owner morning briefing — same engine that drives insurance renewals.

Master switch

Flagged off by default

The entire retrofit ships behind a master switch and four sub-switches. Turn on what your company needs.

Audit

Defensible record

Every assignment, transfer, and return logged. The "did we ever get that laptop back?" question has an answer.

Salvage marketplace v2

The dumpster gets smaller.

Auction surplus materials by sealed bid instead of tossing them. Route donations to nonprofits with a 5-clause watchlist matcher. Roll the LEED contribution up to a per-project sustainability scorecard. Reputation scoring uses weighting by track record so a single-transaction buyer doesn't game the system with one good review.

  • Sealed-bid auction — first-in-first-out workflow with predictable resolution; auto-bid is off by default.
  • Donation routing — a 5-rule watchlist routes to the closest nonprofit by geographic distance.
  • LEED rollup — diverted weight rolls up to a per-project sustainability scorecard.
  • Reputation scoring — weighted by track record; new sellers and buyers start at the marketplace average and earn their own score as they transact.
  • Cross-customer marketplace — opt-in. Customers who opt into the shared salvage feed get a dedicated marketplace namespace .
  • Stripe payments — test mode at launch; live payouts open once your account passes Stripe's identity-verification (KYC).
Salvage scorecard — Westside Tower
Diverted
12.4t
+ 3.1t this month
LEED MR
+2 pts
credit MR-2
Recent disposition
Door frames (qty 24) → Habitat ReStoreDonated
Steel decking (320 sqft) → AuctionBid open
Insulation R-19 (12 bags) → Customer poolListed
Cross-cutting

The audit trail every compliance flow inherits.

Soft delete

Deletion approval workflow

Nothing is hard-deleted from a compliance surface. Soft delete with deletion approval, two-stage review, and a documented reason field.

Field history

Per-field change log

Every changed field on every compliance object writes a history row — who, when, old value, new value. Auditor-ready.

Tamper-resistant

Event ledgers

One-click sign-in links, alumni access events, board engagement events — every "what happened" record is tamper-resistant and can't be edited after the fact.

See compliance on a real project.

Bring your three messiest jobsites. We'll walk through the lien-rights calendar, the per-diem split, and the alumni portal on data that looks like yours.