taxauditpro

TaxAuditPro

Smart Tax Audit & Financial Management System — a multi-tenant web application for CA firms and financial professionals to manage clients, accounting data, financial statements, reconciliations, tax audit procedures, working papers, observations, and approval workflows.

Status: functional application prototype. Financial calculations, workflows, and permissions are implemented end-to-end, but production readiness (security hardening, penetration testing, accounting compliance review, disaster recovery) has not been tested. Statutory checklists are configurable templates and must be verified by a professional before use. The system never represents an internally completed workflow as a statutory filing or professional certification.

Tech Stack

Repository Layout

taxauditpro/
├── backend/
│   └── src/
│       ├── config/           # env, database, storage config
│       ├── middleware/       # auth, rbac, errors, rate limiting, audit logging
│       ├── modules/          # auth, organizations, users, clients, engagements,
│       │                     # accounting, imports, reconciliation, gst, audit,
│       │                     # working-papers, observations, queries, documents,
│       │                     # tasks, notifications, reports, ai, audit-logs
│       ├── jobs/             # background import/report workers
│       ├── app.ts
│       └── server.ts
│   └── prisma/
│       ├── schema.prisma
│       └── seed.ts           # demo data (clearly labelled as demo)
├── frontend/
│   └── src/
│       ├── components/       # ui primitives (shadcn-style), tables, charts
│       ├── layouts/          # app shell (sidebar, topbar)
│       ├── pages/            # all module pages
│       ├── services/         # API client
│       ├── hooks/            # TanStack Query hooks
│       ├── routes/           # protected route definitions
│       └── types/
├── docker-compose.yml
├── .env.example
└── README.md

Quick Start (Docker)

git clone https://huggingface.co/Deepak345/taxauditpro
cd taxauditpro
cp .env.example .env            # then edit secrets — never commit .env
docker compose up --build       # starts postgres + backend + frontend

• Frontend: http://localhost:5173
• API: http://localhost:4000/api
• Health check: http://localhost:4000/api/health

Quick Start (Manual)

# 1. PostgreSQL (any 14+ instance)
#    Point DATABASE_URL at it (see .env.example)

# 2. Backend
cd backend
npm install
npx prisma migrate deploy        # or: npx prisma migrate dev
npm run seed                     # demo data
npm run dev                      # http://localhost:4000

# 3. Frontend
cd frontend
npm install
npm run dev                      # http://localhost:5173

Demo Accounts (seeded demo data only)

All seeded records are demo data for a fictional firm ("Sharma & Associates") and are clearly labelled. Never mix them with real client records.

Change all demo passwords before any non-demo deployment.

Roles

SUPER_ADMIN, FIRM_ADMIN, AUDIT_MANAGER, CA_AUDITOR, AUDIT_ASSISTANT, ACCOUNTANT, CLIENT. Permissions are enforced at the backend API level for every endpoint; organization-level data isolation is enforced by tenant scoping middleware on every query.

Key Modules

1. Dashboard — live metrics from stored data (no hardcoded financials)
2. Clients — full CRUD, PAN/GSTIN, archive, export
3. Engagements — status workflow (Draft → Data Collection → … → Completed), 11-tab workspace
4. Financial Data Import — CSV/XLSX, column mapping, validation, error report, batch tracking, rollback
5. Accounting — chart of accounts, ledgers, vouchers/transactions, decimal-safe math
6. Financial Reports — Trial Balance, P&L, Balance Sheet, Cash Flow, sales/purchase/expense/debtors/creditors/stock
7. Bank Reconciliation — statement import, suggested matches, manual matching, summary, confirmation
8. GST Reconciliation — Purchase↔GSTR-2B, Sales↔GSTR-1, ITC review (classification only, never automatic compliance decisions)
9. Tax Audit Checklist — configurable, versioned templates
10. Working Papers — versioned, review/approval workflow, locked after approval
11. Observations — linked to transactions/ledgers, never auto-classified as statutory violations
12. Client Queries — query → notification → response → review workflow
13. Documents — private storage, validation, versioning, access control
14. Tasks, Notifications, Audit Logs, Reports Center, AI Assistant (opt-in, human-reviewed)

Configuration

All configuration is environment-based (see .env.example). Secrets are never hardcoded. AI features are disabled by default and require explicit enabling plus a configured provider; uploaded documents are treated as untrusted (prompt-injection resistant — extraction output always requires human confirmation before it reaches accounting records).

Testing

cd backend && npm test           # vitest + supertest (auth, clients, financial calcs, reconciliation, RBAC, tenant isolation)
cd frontend && npm test          # vitest + React Testing Library

License

Private prototype — all rights reserved.