Mark
guest@mark: ~/projects/true-trail
guest@mark:~/projects/true-trail$cat projects/true-trail
True Trail
Multi-Tenant Financial Transparency Ledger
A multi-tenant SaaS that gives organizations handling shared funds — subdivisions, HOAs, and community associations — a permanent, tamper-evident record of every income and expense. Where the organization's finance officers do the recording, the platform's real job is letting members who never touch the books independently verify what happened to the money, without needing to understand accounting.
User Roles
Org Administrator
Owns the organization's account: configures profile, currency, and timezone, invites and manages Finance Officers and Auditors, and generates transparency share links.
Finance Officer
Registers entities and records every Income and Expense as a permanent ledger entry with optional evidence attachments. Mistakes are fixed with a linked Correction, never an edit or delete.
Auditor / Reviewer
Full read visibility into every transaction and correction across the organization, without data-entry access — a lightweight oversight role for board members or external reviewers.
Member / Viewer
Verifies financial activity through an unguessable, read-only share link — no account, login, or accounting knowledge required.
How It Works
Append-Only, Enforced at the Database
Ledger entries can never be edited or deleted through any code path — not just hidden from the UI, but rejected at the database level. Corrections reference the original entry, which stays visible and unaltered, so the audit trail can't be quietly rewritten by the people trusted to maintain it.
No-Account Member Verification
Org-level and entity-level share links give members independent, read-only access to real financial activity without requiring them to create an account — the core trust loop works even for people who will never log in.
True Multi-Tenant Isolation
Each organization is a fully isolated tenant with its own entities, ledger, users, and share links. Subscription state (trialing, active, past due, canceled) gates writes only — every existing record stays fully viewable by every role, including link-holders, even if billing lapses.