A role is a boundary
Owner, HR, finance, manager, employee, and, on Core, supplier. A manager on HR & Payroll sees the team queue and does not see company settings. A supplier on Core sees only their own orders and documents.
Security and administration
Each role sees its own work. The session does not stay open forever.
The suite shares the habit. The products differ in how you sign in, how long an idle session lasts, and how much of the platform an administrator can run.
Sign-in is more than a password
Lite uses two-factor authentication. HR & Payroll uses email MFA, and SSO or an LDAP bind followed by MFA. Core adds SAML, OpenID Connect, and Active Directory, plus a limit on simultaneous sign-ins and forced sign-out.
The idle clock is different
HR & Payroll and Accounting sign an idle session out after 20 minutes. Lite waits three hours. Core applies an idle timeout together with a cap on simultaneous sign-ins. Where a product keeps an audit record, that record remains after the person is signed out.
Business management
Werkflow Core
Roles and licences
Role-based access for Owner, Manager, Accountant, HR, Employee, Supplier, and Super Admin. Licence tiers include a self-service tier for employees.
Sign-in
Multi-factor authentication, and single sign-on through SAML, OpenID Connect, or Active Directory. An idle timeout, a limit on how many places one user can be signed in at once, and forced sign-out.
Recovery and the company record
Full audit log. Password reset by the person, or by an administrator. Backup and disaster recovery, with recovery point and recovery time targets (RPO and RTO). Company settings cover the logo, banking details, NamRA tax details, directors, and a custom login background.
Hire to retire
Werkflow HR & Payroll
Sign-in
Email multi-factor authentication. Single sign-on or an LDAP bind, and then MFA. Sessions sit idle for 20 minutes and then sign out. There is a limit on concurrent sessions.
The company and the record
Company branding, an audit trail, and REST API keys. The owner and Super Admin can run backup and disaster recovery.
SME under 16
Werkflow Lite
Company settings
Name, registration number, TIN, bank details, logo, stamp, and the financial year.
Sign-in and the audit log
Sign-in uses two-factor authentication. An idle session ends after three hours. Every important change is written to an audit log.
Bookkeeping
Werkflow Accounting
Roles
Owner, Manager, and Employee work inside a company. Super Admin is not a user of that company. After verification they open a support console, enter a company to help, and leave.
Session and backup
Sign-in includes a verification step. An idle session ends after 20 minutes. Company settings cover tax. Backup and disaster recovery sit with security.
Werkflow AI
Werkflow Media Monitoring
The company
Company branding, users, and a plan. IT support can reset a password. Super Admin runs the platform console for companies, roles, and API keys.
Sign-in
Sign-in uses a username or email and includes a verification step.