System Online — v3.0.1

User Guide

From file upload to audit-ready documentation in under 5 minutes. Complete reference for all features.

Quick Start — 5 Steps

New here? Follow these steps before reading anything else. The whole product makes sense after one demo run.

1

Go to Factory Audit → click "Run Demo Audit"

Pre-loaded Vietnamese garment factory, 23 workers, 12 weeks. No upload needed.

2

Watch the FAIL status appear — read the violation breakdown

17 BSCI criteria checked against Vietnam Labour Code 2019. Every finding cites the exact law article. No LLM making compliance calls — deterministic rules engine only.

3

Check the Financial Exposure section

Total liability in USD and local currency. Back pay owed, overtime cost, and penalty estimates calculated automatically from raw payroll data.

4

Scroll to the CAP section — expand one item

Auto-generated Corrective Action Plan with corrective steps, preventive actions, evidence required, responsible person, target date. Bureau Veritas auditors accept this format.

5

Click PDF download

Full audit report — findings, financial exposure, CAP — formatted for submission to the audit body. One click.

Total time: under 5 minutes. That replaces 4–8 weeks of consultant preparation work.

What is Tamor AI?

Tamor AI automates the documentation factories need to pass BSCI and SMETA social compliance audits. Factories in Vietnam, Bangladesh, and Indonesia upload payroll and attendance records. The system runs deterministic checks against local labor law, surfaces violations with financial liability, generates corrective action plans, and produces audit-ready PDFs — in minutes not weeks.

What makes this different from Sedex, EcoVadis, or audit portals: Those tools help brands collect data from suppliers. Tamor AI helps the factory prepare the data before the auditor arrives. We analyze raw worker-level payroll records — not surveys or self-assessments. Every finding traces back to a specific worker, a specific week, a specific law article.

Example — Vietnamese Garment Factory, 23 Workers, 12 Weeks

Detected automatically
95.7% of workers exceeded 48-hr weekly limit · 3 workers on track to breach 200-hr annual OT cap · Rest day violations across 22 workers · 651 total violations
Generated in 3 minutes
$2,283 total financial exposure (USD) · 4 CAP items with evidence requirements · Full PDF audit package · Ready for Bureau Veritas submission

How scores and exposure are calculated

Pass Rate
  • Percentage of BSCI criteria returning PASS out of total evaluated
  • CANNOT_ASSESS_REMOTELY criteria excluded from denominator
  • Example: 7 PASS out of 17 criteria = 41.2% pass rate
Financial Exposure
  • Excess OT cost: (actual hours − legal limit) × hourly rate × 1.5x multiplier, per worker per week
  • Back pay: (minimum wage − effective wage after deductions) × affected months
  • Penalty estimate: 25% of total exposure based on country-specific regulatory guidelines
  • All amounts in local currency and USD at World Bank approximate FX rate
Risk Level (Buyer Portal)
  • HIGH (red): any FAIL status or 3+ critical findings
  • MEDIUM (amber): any PARTIAL status or 1–2 critical findings
  • LOW (green): all criteria PASS or CANNOT_ASSESS_REMOTELY only

Factory Audit Dashboard

Navigate to: / (Homepage)

The main workspace for factory HR managers and compliance officers. Upload payroll data, run audits, review violations, manage CAPs, and download audit packages.

Available Sections:

Audit Benchmark Remediation Integrations Trends History Supply Chain Certificates Surveys Regulations

Buyer Portal

Navigate to: /buyer

Portfolio view for brands and retailers monitoring their supplier base. See aggregate risk scores, identify high-risk suppliers, and track corrective actions across all factories. Relevant for LkSG (Germany Supply Chain Act, in force now) compliance monitoring.

Available Tabs:

All Factories High Risk Pending CAP
Total Factories
Supplier count
Total Audits
Audit count
Avg Pass Rate
Percentage
Critical Findings
Critical
Open CAPs
Pending
Total Violations
Count

B1 Portfolio Overview

Bird's-eye view of all supplier compliance in one dashboard. Use this to quickly identify which factories need immediate attention and which CAPs are overdue.

Portfolio Risk Score

Composite score across all supplier audits. Updates automatically when new audits run.

Interpretation:
  • HIGH (Red): Multiple critical findings — immediate action required
  • MEDIUM (Amber): Some issues need attention — monitor and remediate
  • LOW (Green): Portfolio in good standing

Summary Statistics

Six key metrics: Factories, Audits, Avg Pass Rate, Critical Findings, Open CAPs, Total Violations. Click "Refresh Data" to pull latest from database. Export report downloads complete JSON for BI tools.

B2 Filtering Views

All Factories

Complete list with full compliance details. Click column headers to sort by Pass Rate, Critical Findings, or Violations.

High Risk

Factories with FAIL status or 3+ critical findings. These require immediate remediation. Click "View Details" to see CAP entries and assign priority.

Pending CAP

Factories with open corrective action plans. Check target dates and flag overdue items before they become audit failures.

B3 Factory Details

Click "View Details" on any factory for comprehensive audit results and full CAP breakdown.

Factory Summary Card

Pass Rate, Critical Findings, Violations, Open CAPs, last audit date, and overall compliance status at a glance.

Corrective Action Plans

All open CAP items with severity, root cause, corrective actions, preventive actions, responsible person, and target date.

For each CAP item:
  • Criterion — the BSCI Performance Area violated
  • Severity — CRITICAL, MAJOR, or MINOR
  • Root Cause — why the violation occurred
  • Corrective Actions — steps to fix the issue
  • Preventive Actions — steps to prevent recurrence
  • Evidence Required — documents to submit to auditor
  • Target Date — deadline for completion

B4 Data Export

JSON Report Export

Click "Export Report" — browser downloads portfolio-report.json with all factories, audits, and CAP data. Import into BI tools or share with stakeholders.

PDF Portfolio Report

Formatted PDF for executive distribution. Endpoint: GET /api/brand/{brand_id}/portfolio/pdf

B5 Buyer Portal API

Get Portfolio

GET /api/brand/{brand_id}/portfolio

Returns total_factories, avg_pass_rate, risk_score, risk_level, critical_findings, open_caps, factories[], high_risk_factories[], pending_cap_factories[].

Get Factory Details

GET /api/factory/{factory_id} — factory info, last audit, all CAP entries, audit history.

Get Brand Audits

GET /api/brand/{brand_id}/audits — filter by status, factory_id, or limit.

1 Audit

Upload factory payroll and attendance data. The system checks for overtime violations, missing rest days, wage non-compliance, and child labor across Vietnam, Bangladesh, and Indonesia — with every finding traceable to a specific law article.

Demo Audit

Pre-loaded Vietnam garment factory. Click "Run Demo Audit" to see the full workflow without uploading anything. Use this to learn the system or prepare for demos.

Upload Your Own Data

Drop a CSV or Excel file, fill in factory details, select audit standard, click Run Audit.

Required fields in your CSV:
  • worker_id, name, department, contract_type
  • basic_wage, currency, overtime_rate, age, gender, is_migrant
  • wage_deductions, week_1 through week_12 (regular hours)
  • ot_1 through ot_12 (overtime hours per week)
Supported formats:
  • CSV, Excel (.xlsx, .xls), PDF, JPG, PNG — see Section 13 for multi-format support

Supported Audit Standards

BSCI 2.0 (amfori) SA8000 WRAP Sedex / SMETA

Supported Countries

Vietnam — Labour Code 2019 Bangladesh — Labour Act 2006 Indonesia — Manpower Act 2003

2 Benchmark

Compare factory performance against regional industry averages. Know whether a 55-hour week is normal for your sector or an outlier before the auditor arrives.

Regional Benchmarks

Select Vietnam, Bangladesh, or Indonesia to see average OT hours, median hours, pass rates, and top 3 violations for that region and sector.

Factory Comparison

Enter factory IDs separated by commas and click "Compare" to see side-by-side pass rates, violations, and risk levels across multiple sites.

3 Remediation

Track progress on fixing violations. Each CAP item has milestones. Mark them complete as you implement changes and submit evidence.

CAP Management

Select an audit from the dropdown to see all its CAP items. Each item shows status (OPEN / IN_PROGRESS / CLOSED), progress percentage, and upcoming target date. Items overdue by more than 7 days flag automatically.

Milestone Tracking

Click a CAP item, mark individual milestones complete, and add evidence notes. Each milestone update timestamps the action and updates the overall progress bar.

Standard milestones per CAP:
  • 1 — Initial assessment completed
  • 2 — Corrective actions implemented
  • 3 — Evidence submitted for review
  • 4 — Verification completed

4 Integrations

Connect existing HR and timekeeping systems to eliminate manual CSV exports. Supports Kronos, Workday, SAP, and QuickBooks.

System Connections

Click "Connect Integration" for your system, configure the webhook URL in your HR software, and data syncs automatically.

Webhook Notifications

Configure webhooks to receive real-time alerts for audit completion, CAP deadlines, and remediation updates. Available endpoints:

  • POST /api/v1/webhooks/audit_complete
  • POST /api/v1/webhooks/cap_due
  • POST /api/v1/webhooks/remediation_update

5 Trends

Visualize compliance improvement over time. See whether remediation is actually working or whether violations are accumulating across audit cycles.

Factory Trends

Enter a factory ID and click "Load Trends" to see pass rate, violation count, and critical findings history across all past audits for that site.

Portfolio Overview

Click "Portfolio Overview" to see aggregate pass rates and total violation trends across all factories in the database.

6 History

Every audit is stored with its full result set. Browse the complete record of any factory, download PDF reports for any historical audit.

Audit Timeline

Enter a factory ID and click "View History" to see all past audits in a table with date, status, pass rate, violations, and critical findings count.

Report Downloads

Click "View" for audit details inline. Click "PDF" to download the formatted executive summary. Share with BSCI auditors or brand CSR teams.

7 Supply Chain

Map your supply chain from Tier 1 direct factories down to Tier 3 raw material suppliers. See how compliance risk cascades through the network when a node fails.

Add Suppliers

Enter brand ID, supplier ID, name, tier (1 / 2 / 3+), country, and parent supplier ID. Click "Add Supplier" to register the relationship.

Cascade Risk Analysis

View the supply chain map showing tier breakdown and cascade risk score. When a Tier 2 supplier fails, the cascade risk score for all Tier 1 factories sourcing from it increases automatically.

8 Certificates

Track expiration dates for BSCI, SA8000, WRAP, and other certifications. Automatic alerts when certificates are within 30 days of expiry.

Register Certificates

Enter supplier ID, certificate type, certifying body, issue date, and expiry date. Click "Register Certificate" to add to the tracker.

Expiry Alerts

Alert banner appears automatically when any certificate is within 30 days of expiry. Search by supplier ID to see days remaining for specific certificates.

9 Worker Surveys

Collect anonymous feedback directly from factory workers. Workers can report concerns about wages, hours, safety, and treatment without revealing their identity — a requirement for several BSCI Performance Areas.

Submit Survey

Workers enter factory ID and answer four questions: wages paid on time, overtime hours recorded correctly, workplace safety, and respectful treatment. Optional concerns and suggestions. Submitted anonymously by default.

View Results

Aggregate satisfaction scores appear after submission. See average score, satisfaction level, flagged surveys, and top concerns. Track trends over time to detect deterioration before an audit cycle.

10 Regulations

Stay ahead of labor law changes in Vietnam, Bangladesh, and Indonesia. See upcoming regulatory changes, their effective dates, severity levels, and which BSCI criteria they affect.

Country Regulations

Click Vietnam, Bangladesh, or Indonesia to see all known labor law changes with effective dates and severity ratings (HIGH / MEDIUM / LOW impact on audit criteria).

Alert Feed

Click "All Alerts" for all upcoming and recently-effective regulations across all countries sorted by effective date. Identify high-severity changes and plan compliance updates before they affect audit results.

Active Regulatory Context

Germany's LkSG (Supply Chain Due Diligence Act) is in force now for companies with 1,000+ employees. EU CSDDD is under Omnibus Directive review. LkSG is the active compliance pressure for European brands today — the Buyer Portal is designed to support LkSG-aligned supplier monitoring.

11 New in v3.0.1 — BSCI PA5-PA10 Support

Version 3.0.1 extends coverage from working hours and wages (PA1–PA4) to the full BSCI standard through facility data and supplier questionnaire inputs.

Enhanced PDF Reports

Full PDF generation using ReportLab — formatted tables, compliance determinations, critical findings, CAP items, financial exposure breakdown.

Endpoints:
  • GET /api/report/{audit_id}/pdf — full audit report
  • GET /api/report/{audit_id}/executive-summary/pdf — one-page summary

Facility Data → PA5 Health & Safety

Pass facility_data to the audit function to enable Health & Safety assessment: fire_exit_count, trained_first_aiders, ppe_available, machine_guarding_present, safety_training_records, accident_reporting_system.

Questionnaire Data → PA5-PA10

Pass questionnaire_data to enable PA5 through PA10 checks via supplier self-assessment responses. Factory completes the questionnaire through the Supplier Portal.

Subcontractor List → PA10

Pass subcontractor_list as an array of {name, bsci_audited, last_audit_date} to enable PA10 Responsible Subcontracting assessment.

12 BSCI Performance Areas — PA5 to PA10

PA5 — Health & Safety

Fire exits (1 per 100 workers), first aid kits, trained first aiders (1 per 50 workers), PPE, machine guarding, safety training, accident reporting, fire extinguishers, emergency assembly point.

PA6 — No Discrimination

Gender wage gap analysis (>10% threshold), OT hours disparity detection, recruitment policy, anti-harassment policy, grievance mechanism, migrant worker wage check.

PA7 — Environmental Protection

Waste management, hazardous waste segregation, chemical handling, MSDS availability, energy efficiency, water management, water treatment, emission controls.

PA8 — Freedom of Association

Trade union or worker committee existence, collective bargaining agreement, anti-retaliation policy, union meeting access, worker representative access. Bangladesh-specific restrictions flagged automatically.

PA9 — Decent Working Conditions

Living wage benchmark, clean water, sanitary facilities, ventilation, lighting, temperature control, noise control, break room, cafeteria, accommodation (if provided).

PA10 — Responsible Subcontracting

Subcontractor list maintenance, BSCI audit verification for subcontractors, traceability system, unauthorized subcontracting detection, production records validation.

13 Smart Column Mapping — Any Spreadsheet Format

The L1 Extractor maps unknown column names to standard fields automatically. Factories export data in dozens of formats — Vietnamese, Bahasa, Italian, HR-system-specific headers. Tamor AI reads them all.

How It Works

L1 tries hardcoded mapping first (e.g., "ma_nv" → worker_id). If more than 2 expected fields are missing, it calls Gemini to semantically map remaining columns. Outputs clean WorkerRecord objects regardless of source format.

Example: Italian Columns (AI required)

factory_italian_style.csv
Columns: codice_fiscale, ragione_sociale, retribuzione_base...
→ Mapped to: worker_id, name, basic_wage...

Requires OPENROUTER_API_KEY or GEMINI_API_KEY in .env file.

Example: Vietnamese Columns (hardcoded)

factory_vietnam_unknown_columns.csv
Columns: Mã_NV, Tên_NV, Lương_cơ_bản...
→ Mapped to: worker_id, name, basic_wage...

Works without API key. Vietnamese, Bahasa, and common HR formats are pre-mapped.

Supported Output Fields

worker_idname departmentcontract_type basic_wagecurrency overtime_rateage genderis_migrant weekly_hoursweekly_overtime_hours

14 Multi-Format Document Processing

The L0 layer accepts payroll and attendance data from virtually any source document — not just clean CSVs.

Supported Document Types

CSV / Excel PDF (digital) PDF (scanned) DOC / DOCX TXT / JSON JPG / PNG TIFF / WebP

Document Classification

L0 automatically classifies documents: STRUCTURED_SPREADSHEET (direct parsing), DIGITAL_PDF (text extraction + tables), SCANNED_PDF (VLM/OCR), IMAGE (VLM), MIXED_PACKET (ZIP batch processing).

PDF Table Extraction

Uses pdfplumber for table detection with PyMuPDF fallback. Preserves tabular data structure from payroll PDFs. Tables converted to structured records automatically.

15 Regulatory Frameworks

Tamor AI maps compliance determinations to multiple international frameworks beyond BSCI.

Germany LkSG — Supply Chain Due Diligence Act (Active Now)

In force since January 2023 for companies with 1,000+ employees. Covers: No Child Labor, No Forced Labor, No Human Trafficking, Fair Wages, No Discrimination, Freedom of Association, Safe Working Conditions, Environmental Protection, Risk Assessment, Remediation Mechanism.

UK Modern Slavery Act

No modern slavery, human trafficking prohibition, slavery statement requirement, risk assessment, supplier verification.

France Duty of Vigilance

Due diligence plan, risk mapping, regular monitoring, grievance mechanism, annual reporting.

Netherlands Child Labor Due Diligence

No child labor, due diligence declaration, risk assessment, supplier monitoring.

16 API Usage Examples

Full Audit with Facility & Questionnaire Data

from l2_engine import run_bsci_working_hours_audit
from l1_extractor import parse_attendance_csv

workers = parse_attendance_csv("factory_data.csv", "factory_data.csv")

facility_data = {
    "fire_exit_count": 3,
    "trained_first_aiders": 5,
    "ppe_available": True,
    "machine_guarding_present": True,
    "safety_training_records": True,
    "accident_reporting_system": True,
}

questionnaire_data = {
    "harassment_policy_exists": True,
    "grievance_mechanism_exists": True,
    "waste_management_plan": True,
    "trade_union_exists": True,
    "clean_water_available": True,
    "subcontractor_list_maintained": True,
}

subcontractor_list = [
    {"name": "Fabric Supplier A", "bsci_audited": True, "last_audit_date": "2024-06-15"},
    {"name": "Trim Supplier B", "bsci_audited": False, "last_audit_date": "2023-01-01"},
]

result = run_bsci_working_hours_audit(
    factory_id="VN-001",
    factory_name="Sample Factory",
    country="VN",
    workers=workers,
    region="REGION_I",
    sector="garment",
    audit_period_weeks=12,
    facility_data=facility_data,
    questionnaire_data=questionnaire_data,
    subcontractor_list=subcontractor_list,
)

PDF Report Endpoints

  • GET /api/report/{audit_id}/pdf — full audit report (true PDF)
  • GET /api/report/{audit_id}/executive-summary/pdf — one-page summary
  • GET /api/brand/{brand_id}/portfolio/pdf — brand portfolio report

Gap Analysis & Dashboard

  • GET /api/audit/gap-analysis/{audit_id} — all FAIL/PARTIAL determinations with violation counts
  • GET /api/audit/summary/dashboard — aggregate metrics across all audits
  • GET /api/remediation/trends — remediation progress: total, completed, in_progress, open, overdue

17 Evidence Linking & Audit Trail

Complete traceability from every compliance finding back to the source document and the specific worker record that triggered it.

EvidenceRef Structure

Each finding carries: source_doc (filename), field_path (worker_id + week + field), extracted_value (the actual number), and confidence score (0.5–1.0). This is what you present when an auditor challenges a finding.

Entity Linking

Cross-reference suppliers, facilities, certifications, and brands. Relationship types: owns_facility, has_certification, sourced_from, verified. Worker records are automatically linked to source documents via metadata.