How to use WSIB Workflow

1. 1Open /signup. Enter your company name, work email and a password (8+ characters).
2. 2Click Create account. We create your organization, make you the owner and drop you on the readiness board.
3. 3If your Supabase project has email confirmation on, you'll be asked to confirm your inbox before signing in.
4. 4Invite the rest of your team from Team → Invite member once you're in.

Tip. Already invited by a teammate? Use the link they sent — that flow keeps you in their existing organization instead of creating a new one.

1. 1Open the app and enter the email you signed up with.
2. 2Type your password. If you forgot it, hit Forgot password — we'll email a reset link.
3. 3On first sign-in we'll prompt you to enable MFA. Scan the QR code with Google Authenticator, 1Password or any TOTP app.
4. 4Enter the 6-digit code to confirm. From now on, you'll be asked for that code on every new device.

Tip. Owners can require MFA for their whole organization. See Team → Security.

1. 1Open Team in the top navigation.
2. 2Click Invite member, type a work email, pick a role.
3. 3We email an invite link that opens at /invite/<token>. The invitee creates their password and joins your organization.
4. 4You can change a role or remove a member at any time from the same screen.

Tip. Belong to more than one company? Use the organization switcher in the top-left to jump between dashboards.

1. 1Land on the dashboard at /. The first thing you see is your active projects ranked by risk.
2. 2Click any project to drill into its contractors.
3. 3Filter by Compliant / Expiring / Stale / Expired using the chips on top.
4. 4Click a contractor to see exactly which document (WSIB or COI) is causing the colour.

Tip. Red means do-not-admit. Amber means OK to admit if you've already sent a reminder. Green means good to go.

1. 1From the dashboard, click New project.
2. 2Give it a name (e.g. "123 King St — Phase 2"), a client and a start date.
3. 3Add the contractors that will be on this site. You can pick existing ones or create new.
4. 4Save. The project shows up on your board with its readiness already computed.

1. 1Open a project, click Add contractor → New contractor.
2. 2Fill the legal company name, primary contact email, optional WSIB account number.
3. 3Hit Save. The contractor is now linked to this project and visible in your global directory.
4. 4To link an existing contractor to another project, use Add contractor → Existing and search.

Tip. Search the directory before creating a new entry — duplicates split the audit trail.

1. 1Open a contractor → Documents tab → Upload document.
2. 2Pick the document type (WSIB Clearance or Certificate of Insurance).
3. 3Drag the file in or click Browse. We accept up to 25 MB per file.
4. 4Review the parsed fields. Hit Save to record it — the contractor's colour updates immediately.

Heads-up. Never upload a screenshot of a clearance certificate. Upload the original PDF — it carries the signature we verify.

1. 1Open the contractor → Documents → Request document.
2. 2Choose the document type and the email of the person who can upload it.
3. 3We send them an email with a link that looks like /upload/<random-token>. The link is single-organization and revocable.
4. 4When they submit, you'll get a notification and the file lands directly on the contractor card.

Tip. Use the Action Center to see every open request across your organization, with last-touched dates.

1. 1Subcontractor opens the link from the email.
2. 2They drag the document in or take a photo on mobile.
3. 3They tap Submit. The upload is encrypted in transit and saved to your contractor's card.
4. 4They see a confirmation page so they know the request is complete.

Tip. If they upload the wrong file, just send a new request — old tokens can be revoked from the contractor screen.

1. 1Open Settings → Reminders. Pick warning windows (e.g. 14 days, 7 days, day-of for expiries).
2. 2Add the email addresses on your side who should get the nudge.
3. 3Outstanding document requests get their own cadence (e.g. resend after 3 days, then daily).
4. 4Everything queued for action shows up in the Action Center bell at the top.

Tip. Snooze a reminder from the Action Center if you've already followed up by phone.

1. 1Open Team → Audit, or the Activity tab on a project or contractor.
2. 2Filter by user, by event type (sign-in, upload, edit, delete) or by date range.
3. 3Click any event to see the full payload (before / after for edits).
4. 4Export the visible range to CSV for record-keeping.

1. 1Open Settings → AI extraction and toggle it on. (Owners only.)
2. 2Upload a COI as usual. The extraction runs in the background.
3. 3You'll be asked to confirm the fields. Anything we're unsure about is flagged in amber.
4. 4Save to accept. The original PDF stays on file as the source of truth.

Heads-up. OCR is a convenience, not a guarantee. Always eyeball the parsed fields before saving.

1. 1Open a project → Owner pack.
2. 2Pick the timeframe (default: today + last 90 days of activity).
3. 3Hit Generate. We render the PDF on the backend and email a copy to you.
4. 4Forward the PDF to your owner / GC / insurer. They don't need an account to read it.

1. 1Open Settings → Webhooks, click Add endpoint.
2. 2Paste the receiving URL and pick the event types you care about.
3. 3Copy the signing secret we generate. Verify the X-Wsib-Signature header on your side.
4. 4We retry failed deliveries with backoff and surface them on the same screen.

Tip. Use a test endpoint like webhook.site first to see exactly what we send.

1. 1Owners open Settings → Billing.
2. 2Pick or change a plan. We bill monthly or annually in advance.
3. 3On a failed payment you'll see a yellow banner across the dashboard. Update the card to lift the hold.
4. 4Cancel from the same screen. Your data is retained per the Privacy Policy.

1. 1Open Settings → Email.
2. 2Set the From address you want subcontractors to see, e.g. compliance@yourco.com.
3. 3Add the SPF / DKIM records we show you to your DNS.
4. 4Send a test email from the same screen to confirm delivery.

Tip. Until DNS is verified we'll send from a generic no-reply address with a Reply-To pointed at you.

1. 1First visit shows a consent banner at the bottom.
2. 2Accept turns on analytics. Reject keeps only essential cookies.
3. 3Change your mind any time from Cookie preferences in the footer.
4. 4We honor the Global Privacy Control signal automatically — if your browser sends it, we don't show the banner.