Platform at a Glance
Six integrated modules covering the full operational lifecycle
People Ops
HR & Workforce
Central employee directory with profile management, onboarding workflows,
asset & license assignments, and a full activity history per employee.
Access & Licenses
SaaS Management
Manage software licenses across all vendors — track assignments, expiry,
costs, linked payments, and a complete per-license change history.
Assets
IT Hardware
Track physical devices and hardware inventory — laptops, phones, peripherals —
with assignment history, condition status, and subsidiary grouping.
Spends Ops
Finance & Expenses
Submit, review, and analyse company expenses. Vendor management,
category tagging, approval workflows, and spend trend dashboards.
Cloud Costs
Infrastructure Spend
Real-time cloud spend visibility across DigitalOcean and E2E Networks —
monthly summaries, resource-level breakdowns, and activity tracking.
Admin & Governance
Platform Administration
User provisioning, role & permission management, subsidiary configuration,
system-wide audit logs, and platform settings — all in one admin panel.
People Ops
The employee directory and workforce management hub — from onboarding to offboarding.
✓Employee Directory
Searchable, filterable list of all employees across subsidiaries. View full profiles, status, department, and contact info.
✓Profile Management
Create and update employee records including role, manager, joining date, and employment status (active, inactive, on leave).
✓Asset Assignments
View all hardware assets assigned to each employee with full assignment and return history.
✓License Assignments
See all software licenses assigned to an employee. Assign or revoke directly from the employee profile.
✓Activity Logs
Per-employee audit trail of every change — who updated what and when — for compliance and HR records.
✓Multi-Subsidiary Support
Manage employees across multiple subsidiaries with clear segregation and cross-entity reporting.
Access & Licenses
End-to-end software license lifecycle management — procurement, assignment, cost tracking, and audit.
✓License Registry
Central registry of all software licenses with vendor, product, seat count, cost, billing cycle, and expiry dates.
✓Seat Assignments
Assign and unassign licenses to employees with a searchable picker. Real-time seat utilization tracking.
✓Expiry Management
Filter licenses by active, expiring soon, or expired. Proactively track renewals to avoid service disruptions.
✓Payment Linking
Manually link expense records to licenses for cost reconciliation. Linked payment count shown at a glance on the license card.
✓Change History
Complete per-license changelog — field edits, assignments, payment links, all timestamped with the user who made the change.
✓Vendor & Category Tags
Organise licenses by vendor and category for reporting and budget allocation.
Assets
Full hardware inventory management with lifecycle tracking from procurement to retirement.
✓Hardware Inventory
Track laptops, phones, monitors, and other IT assets with serial numbers, purchase dates, and current condition.
✓Assignment Tracking
Assign hardware to employees and record handover dates. Full history of who held each asset and when.
✓Status Management
Tag assets as active, in repair, retired, or lost. Quickly identify unassigned inventory available for allocation.
✓Asset Dashboard
Summary metrics on total assets, assigned vs. available, and breakdown by category or subsidiary.
Spends Ops
Centralised expense management with vendor workflows, category controls, and spend analytics.
✓Expense Submissions
Log company expenses with amount, vendor, category, date, and supporting notes. Bulk import supported.
✓Vendor Management
Maintain a curated vendor directory. Associate expenses with vendors for consolidated spend views per supplier.
✓Category & Tags
Organise expenses with custom categories and tags. Flexible categorisation aligned to our internal chart of accounts.
✓Spend Dashboard
Visual dashboards showing spend by vendor, category, and time period. Identify cost trends and anomalies quickly.
✓Recurring Expenses
Track subscription and recurring costs with billing frequency. Easily spot growing recurring commitments.
✓License Cost Reconciliation
Link expense entries directly to software licenses, connecting actual payments to their corresponding tool in the license registry.
Cloud Costs
Real-time visibility into cloud infrastructure spending across all providers.
✓DigitalOcean Integration
Live cost data from DigitalOcean — resource-level breakdowns, team/project grouping, and daily usage trends.
✓E2E Networks Integration
Monitor E2E Networks infrastructure costs alongside other providers for a unified cloud spend view.
✓Monthly Summaries
Month-over-month cost comparison for DigitalOcean. Identify spend spikes and track savings initiatives.
✓Activity Tracking
Logs of resource provisioning events and cost anomalies for investigation and accountability.
Admin & Governance
Platform-level controls for user access, roles, subsidiaries, and complete audit visibility.
✓User Management
Invite and manage platform users. Activate, deactivate, and assign roles from a single admin panel.
✓Role-Based Access Control
Granular permissions per module — view, edit, manage — assigned at the user level. Roles ensure least-privilege access across teams.
✓Subsidiary Management
Configure multiple business entities within one platform instance. Data scoped cleanly per subsidiary where needed.
✓System Audit Logs
Immutable, searchable audit trail of all user actions across the platform — who did what, and when.
✓Google SSO
Secure authentication via Google Workspace. No separate passwords — access is tied to company Google accounts.
✓Platform Configuration
Control branding (logo, tagline), module visibility, and global settings without touching code.
Security & Access Control
OpsOne uses Google Workspace SSO — all logins are authenticated through our company Google accounts. Access to modules and actions is governed by role-based permissions: each team member is granted only the access they need. Every action across the platform is audit-logged with the user, timestamp, and change details — giving us a complete internal compliance trail.
Google OAuth 2.0
Role-Based Access Control
Per-module Permissions
Immutable Audit Logs
Session Management
Secure HTTP Headers
Technology Stack
Built for reliability, speed, and zero external dependencies
Node.js + Express
Backend runtime & API
MongoDB
Primary data store
Vanilla JS
No-framework frontend
Google OAuth 2.0
Authentication
Self-hosted
Deployment model
Background Services & Integrations
Automated services that keep OpsOne's data in sync with our external systems
gw-user-sync.service
Active
Always-on daemon that performs bi-directional checks and updates between
Google Workspace user accounts and the OpsOne database — keeping
both systems in sync at all times.
keka-sync.service
Active
Periodically pulls employee records from the Keka HRMS API and writes them
into OpsOne's database — keeping it as the single source of truth for all employee data.
gw-signature.service
Active
Continuously syncs and updates Gmail signatures for all users from
repository-managed templates, automatically reflecting any changes made to an
employee's profile data.
ms_user_sync.service
Active
Continuously reconciles OpsOne employee records with Microsoft 365 —
creating, updating, and removing accounts, syncing license assignments, profile fields, and photos.
snipeit-sync.service
Active
Syncs users, assets, and licenses between OpsOne and SnipeIT — our primary
hardware repository. Asset and license records in OpsOne are authoritative mirrors of SnipeIT,
monitored and managed from the Assets module.
cloud_billing.service
Active
Pulls daily usage and billing reports from DigitalOcean and E2E Networks
into OpsOne. AWS & GCP integrations are in progress.
Currency Exchange API
Active
Fetches daily historical currency exchange rates via the Frankfurter API and stores them in OpsOne.
Ensures all multi-currency expense amounts are converted accurately using the exchange rate in effect on the date of
the transaction. For resilience, falls back to the fawazahmed0 currency-api if the primary source is unavailable.