Platform / Settings

Platform settings

Security, retention, escalation defaults, notification windows and environments. Every change here is versioned and appears in the audit log.

Change history Save changes

Security Notifications Retention Escalation defaults Environments Branding

Action links and authentication

v12 live

Action link expiry

15 minutes

Single use. Tapping an expired link shows the OTP step, never an error page.

Link reuse

Blocked, logged as security.link_reused

OTP delivery

WhatsApp to the same number, SMS fallback

OTP validity

5 minutes · 6 digits

Failed OTP attempts before lock

Lock duration

15 minutes, then consultant can unlock

Never request payment or banking details in chatEnforced at template validation. Templates containing card or account fields are rejected.

Require re-authentication for payments over GHS 50,000

Allow portal sessions to stay signed in for 30 daysOff: 24 hours on shared devices

Notification windows

Client quiet hours

21:00 to 07:00 GMT

Non-urgent messages queue until morning. Payment due and customs hold always send.

Digest option

Daily at 08:00 for clients who opt in

Reminder before task due

72h, 24h, on the day

Repayment reminders

3 days before, on the day

Delay threshold that copies consultant

48 hours

Unanswered message escalation

2 working hours

Escalation ladder defaults

Per type ›

Ownerconsultant or operations officer

at creation

Team lead

after 4 working hours

Operations manager

after 1 working day

Management

after 3 working days

Data retention

Data	Retention	After
Documents and receipts	7 years	Deleted, audit entry kept
Audit log	7 years	Signed archive to cold storage
Messages	2 years	Deleted
Bank statement data	While consented + 90 days	Purged within 24h of withdrawal
Action link tokens	24 hours	Purged
Integration raw payloads	90 days	Deleted, normalised milestone kept

Retention changes apply going forward. Shortening a period never deletes data that a legal hold references.

Environments and deployment

Pipeline ›

Environment	Branch	Version	Deployed	Status
prodthetool.shippingpapa.com	`prod`	`v0.9.4 · a1b2c3d`	Fri 3 Oct 18:10	Healthy
betabeta.thetool.shippingpapa.com	`beta`	`v0.9.5-rc2 · f4e5d6c`	Mon 6 Oct 16:02	Healthy
devdev.thetool.shippingpapa.com	`dev`	`v0.9.6-dev · 9a8b7c6`	Mon 6 Oct 21:30	Deploying

Feature flags

WhatsApp command centerprod · all clients Embedded financingprod · 44 consented companies Bank statement eligibility inputsbeta only · awaiting open-banking adapter Twi templatesoff until payment_due_v1 TWI is approved Native mobile app deep linksplanned