RedMaple is built on a strict multi-tenant schema where every agency operates in an isolated workspace container:

• Tenant Scoping: All database queries are automatically scoped using WorkspaceScope, guaranteeing zero data leakage between agencies.
• Enterprise Authentication: Strong Bcrypt credential hashing and CSRF token verification.
• Role-Based Access Control (RBAC): Permissions segregated by Owner, Admin, and Staff tiers.

When registering a client in the CRM, you can configure their specific language and billing rules:

Every issued invoice is assigned a concurrency-safe sequential code (e.g., INV-2026-0001). An atomic database sequence counter prevents duplicate numbering even under simultaneous checkout attempts.

• Pre-Tax Discount Calculation: Taxes are computed strictly after deducting discounts: Taxable Amount = Subtotal - Discount.
• Regional Tax Presets: UK VAT (20%), DE MwSt (19%), UAE VAT (5%), Saudi Arabia VAT (15%), India GST (18%), Turkey KDV (20%), Pakistan Sales Tax (16%).
• PDF Security PIN: When creating sensitive commercial invoices, enable "Password Protect PDF". The client must enter the assigned PIN before downloading the document.

In commercial accounting, issued invoices must never be deleted. To correct errors, billing mistakes, or cancelled projects, an agency issues a **Credit Note** (CN-YYYY-XXXX).

Credit notes automatically adjust outstanding balances, update the financial audit trail, and maintain strict accounting compliance.

Configure your webhook endpoints in your gateway developer dashboard:

Every webhook payload is verified and indexed using its gateway event ID, preventing double-crediting if a webhook is retried.

Agencies can subscribe to or renew SaaS tiers using discount coupons:

Coupons feature atomic concurrency checks preventing race conditions during checkout spikes.