TRANXACT.AI Help
Module

Platform

The layer that runs underneath every application rather than inside one: who may sign in and what they may do, the automation that reacts to what happens anywhere, the connectors and pipelines that move data in and out, and the analytics that read the whole estate. Administration lives here too — the split between the two was never legible, and both are the platform rather than the business.

8 groups · 31 sections · 130 screens

Access & Security

Who may sign in, what they may reach, and what they did.

Access

9

Who may sign in, which directory vouches for them, what they may reach once they are in, who is signed in at this moment, the duties that must not be combined, administrator authority borrowed for a fixed window, and one person’s identity borrowed for another to debug with.

WorkspaceUsersWho may sign in, which roles they hold, and where they are allowed to work.AdminOpenWorkspaceService AccountsIdentities for software. They hold roles like a person but cannot sign in to the console and are never asked for a second step: a secret, shown once, is exchanged for a short-lived token.OpenWorkspaceRolesWhat a role may reach: modules, locations and warehouses.AdminOpenWorkspaceSingle Sign-OnOne connection per directory — SAML 2.0 and OpenID Connect sign people in; OAuth 2.0, WS-Federation, CAS, LDAP and the rest are described — and the email domains each of them answers for, the directory’s MFA and the roles its groups give.OpenWorkspaceProvisioning (SCIM)Your directory creates, changes and deactivates people here through SCIM 2.0, with a token made on this screen and shown once. Groups it pushes give the roles you choose.OpenWorkspaceWeb & User SessionsEvery web session and every signed-in person, with what each is doing now. Sign out one, several, a person, or everybody else.OpenWorkspaceSegregation of DutiesPairs of duties that should not sit with one person, and who currently holds both. Administrators are exempt — they hold every grant by definition.AdminOpenWorkspaceElevated AccessAdministrator authority borrowed for a fixed window, against a written reason, a ticket and two approvals. It ends on its own.OpenWorkspaceAssumed IdentitySigning in as another person to reproduce their transaction, for a fixed window, against a written reason, a ticket and two approvals. Read-only unless it was approved otherwise, an administrator can never be the subject, and every call made with it is recorded and readable afterwards.Open

Assurance

4

What was done, by whom, and how the platform is performing.

AI Governance

4

Switch AI and automated decision tools off, to suggest-only or on, per area; review what they produced about people; see every use; and disclose each tool.

Configuration

The company tree, the numbering, the lists, and what this company has added.

Core Settings

5

The company tree, the numbering, the lists every module chooses from, and the numbers the platform itself runs on.

Classification

5

Category sets and their trees, descriptive attributes, and the shared address book — the spine every master stands on.

Customization

4

Fields and logic this company has added: labels for the ten spare fields every table carries, custom fields held in a schema of their own, and the company’s own validations. None of them blocks an upgrade.

Automation

Work that happens without anybody doing it, at one record or at a million.

Workflow Automation

3

Work that happens because something happened, without anyone doing it.

Automation

7

What the background jobs found and what became of it, how far each may act by itself, when an approval or a ticket left alone is chased and escalated, and the folders and mailboxes whose documents become drafts.

Batch

7

Mass functions: the jobs every module runs over many records at once, the run books that order them, and what each run actually touched. A job that takes longer than anybody will wait runs in the background, and one nobody should have to be awake for runs on a schedule.

Business Flows

8

The chains that cross module boundaries — procure to pay, quote to cash, hire to retire — counted rather than drawn.

Connectivity

What is published to other software, what is connected in, what reaches out, and what money and public comment come through.

Published API

6

What this company allows to leave it, and who may come and get it. Nothing is reachable from outside until somebody publishes it: one screen, its columns and the rows of it that may travel. Software is then registered, given a key, granted specific exposures and pinned to the addresses it may be used from. The same publication serves a REST API, an OpenAPI document generated per key, and an MCP server for an AI agent.

WorkspaceAPI StudioOne board for the whole of the published API: what is exposed, who holds a key, what each key could not actually do, and every call made in the last few days with the reason for each refusal.OpenRecordsExposuresA decision, taken once, that one screen may leave this company — which columns of it, which rows of it, and whether anything may be written back. Nothing is reachable from outside until it is published here, and there is no "publish everything".OpenRecordsAPI ClientsThe outside software that holds a key to this company. Every call it makes runs as a named user here, so nothing it can reach is anything that user could not already reach. The key is shown once when it is issued and never again.OpenRecordsAPI GrantsWhich software may reach which exposure, and with which verbs. Two partners can hold keys to this company and reach entirely different data; withdrawing one changes nothing for the other.OpenRecordsAllowed SoftwareWhere a key may be presented from: a browser origin, a host, an address or a network. A key that requires an allowlist and has no entries reaches nothing — "no addresses named" reads as "not reachable yet", never as "anywhere".OpenRecordsAPI Call LogEvery call made with an API key, allowed or refused, with the reason for each refusal. This is not the audit log — that records what the record actually did, because a published call goes through the ordinary route and the ordinary route audits itself. This records what was asked, from where, and by which key.Open

External Accountants

1

Letting the firm that keeps your books in, without giving them a standing login. One invitation creates everything they need — a console user with no password, a key for their software, read-only access to the ledgers a practice reads — and hands you one code to send them. They then open this console in a window that expires, reaches only what you allowed, is read-only unless you said otherwise, and records every call. You can see who is in your books right now, and put them out.

Integration

5

What is connected, and what is flowing.

RecordsConnector CatalogWhat can be connected to: protocols, ERP and finance systems, CRMs, identity directories, payment engines and clinical interfaces. Microsoft Teams calls, meetings and presence are not set up here: add them under CRM › Interaction Centre › Connected Channels.OpenRecordsConnectionsA connector configured against a real system — over HTTPS, or directly over the network (a VPN or interconnect) to a database, directory or service port. Every handshake is TLS 1.2 or higher and the server is verified, against a trusted root or a CA you upload under Certificates. Credentials are encrypted on the way in and never come back out — only the last four characters are ever shown. A connection here carries data; it does not place Microsoft Teams calls or create meetings — those run through CRM › Interaction Centre › Connected Channels, and testing a Teams connection here says what that still lacks.OpenRecordsCertificatesCertificates a connection trusts or presents. A trusted CA lets a connection verify a server whose certificate your own authority issued; a client certificate is presented to the server (mutual TLS). What a certificate says about itself is read from it. A private key is sealed on the way in and never shown again.OpenRecordsData PipelinesExtract from a source, apply the field mapping, load to a destination. An incremental pipeline remembers where it finished and starts there next time.OpenViewPipeline RunsWhat each run read, staged for its destination and failed to stage, and where the cursor moved to. Whether the destination itself can be reached is shown by its connection’s health, on Connections.Open

Email

6

What this company sends by email, to whom, and what became of it. Every message goes from noreply@tranxact.ai unless you send from your own domain. An account being created, a requisition raised, a purchase order waiting for its approver, a ticket answered — each event has a default audience, and a rule of your own replaces it.

RecordsEmail SettingsThe sender and the way mail leaves. "Platform" sends through this deployment’s own Microsoft 365 account as noreply@tranxact.ai. Choose Microsoft 365, SMTP or a mail provider to send through your own account and domain instead — the credential is sealed on the way in and never shown again. A company has one set of email settings: open it, press Edit, then Set credential and Send a test.OpenRecordsEmail RulesYour own decision about an event: who receives it and in what words. Any rule for an event replaces its default, so an inactive rule is how an event is switched off. Any screen’s <module>.<screen>.created, .updated or .status_changed can have a rule.OpenViewEmail EventsEverything the product sends by email, and who receives it when you have written no rule.OpenRecordsSupport CopyEvery step of every support ticket — raised, answered, assigned, escalated, resolved, closed — sent by email to the support desk within a minute of it happening. support@tranxact.ai unless you change it. Only what happens from the moment copying began is sent, and internal notes stay inside unless you tick them in.OpenViewEmail OutboxEvery message: to whom, about what, and what the mail server said. A failed one is retried on its own; a held one goes as soon as a transport is configured, unless it is three days old by then.OpenWorkspaceEmail SuppressionsEverybody who pressed Unsubscribe in an email, or was unsubscribed for them. An address here is sent nothing by any company in this system, except a message the person asks for themself to get into their own account. Re-subscribing one needs a reason, and is audited.Open

Events & Webhooks

2

The way this system reaches out.

Payments

3

Card and wallet engines, what they charge, and what they took.

Social Channels

2

The social accounts this company listens through, what each one watches for, and the thresholds applied to everything that arrives. The signals themselves are worked in CRM → Social Desk.

Data & Documents

Where files live, what leaves as paper, and the shapes and sets generated here.

Drives & Files

2

Google Drive, OneDrive, SharePoint, Dropbox, Box, Amazon S3, Azure Blob Storage, Google Cloud Storage and WebDAV — the places this company already keeps files. Connect one and every screen that wants a file can take one from it, and anything TRANXACT produces can be written back to it.

Content

4

Where documents come from, what was found in them, and what they are attached to.

Printed Forms

2

The invoice, the cheque, the purchase order and every other document this company sends out — drawn on the page rather than written in code. One of each ships with TRANXACT carrying the TRANXACT mark; upload your own logo under Personalize and every form takes it, without any of them being edited.

Electronic Signature

2

What this company signs electronically, who may sign it, and every envelope that has gone out.

Data Retention

3

Archive or purge data once it is old and nobody has touched it for a while — both periods, how often it runs, and archive or purge, are yours to set. Nothing is shipped: with no policy, data is kept for ever. Archived records can be read and put back; purged ones cannot.

Synthetic Data

2

Data that never belonged to anybody: generators fitted to a real table, and what each run produced.

Data Quality

4

Duplicates found by the weekly scan, the rules good master data keeps, what breaks them, and merges a data steward approves.

Insight

Governed datasets, the numbers defined once, and the catalog over them.

Analytics

5

Governed datasets, the numbers defined once, and the boards that show them.

Reporting

2

Executive, management, operational and audit reporting over this module’s records.

Operations

Coming across from the old system, whether this one is well, and what it is licensed on.

Legacy Migration

10

Bringing a company across from the system it is leaving — masters and open transactions through the application, closed history archived rather than re-posted.

WorkspaceMigration CockpitThe cutover as a numbered plan, one step at a time: where in the old system each extract comes from — with the program or query to produce it — then upload, read the rejections, and load, post, archive or post the balances.OpenWorkspaceMigration ReadinessGo-live readiness per business area — ERP, CRM, supply chain, manufacturing, HR, healthcare, student and staffing: records, data quality, exceptions, reconciliation and a status for everything each area has to bring across.OpenRecordsSource SystemsThe systems TRANXACT knows how to be migrated from, and how data gets out of each.OpenRecordsMigration ObjectsWhat comes across from each system, what it is called over there, and which of the three kinds of data it is.OpenRecordsField MapsHow a field becomes a field. The transform is where a SAP date, a German decimal or an X-means-blocked flag is dealt with.OpenViewMigration BatchesEvery consignment of rows, with what became of each.OpenViewMigration RunsValidate, load, archive and balance runs. A run cannot be deleted — it accounts for records that now exist.OpenViewMigration ResetsEvery time a company’s cutover was started again, and what it took with it. Kept because the load runs a reset deletes were what accounted for records that now exist — so this is the only trace a wipe leaves.OpenViewArchived HistoryClosed documents from the old system, kept whole and addressable by their old number. Records, not transactions: nothing here has been posted.OpenViewOpening BalancesThe one thing the old ledger puts into this one, as a single conversion entry on the cutover date.Open

Health

6

What the platform is doing this second — every request, background worker and batch run with the database work behind it and the locks it holds — and whether the integrations, pipelines and workflows are healthy. Cancel a runaway query, release a stale lock.

License

2

What this installation is licensed on — a percentage of the revenue filed with the tax authority for the prior year, or the gigabytes of data it consumes — and the meter behind it: data in, data out, disk, data processed by the database and AI engines, and backups, each measured continuously. The basis changes only with a new license key from TRANXACT.

More