This application is free to use. Please read the disclaimer.
I originally developed this system to support SOX and financial reporting compliance for both public and private companies, particularly in relation to anti-bribery, anti-corruption, and anti-fraud regulations such as the Foreign Corrupt Practices Act (FCPA). During my work with organizations of different sizes, I noticed that many smaller companies cannot afford the high cost of commercial compliance platforms, nor do they always have the technical expertise required to manage complex server-based solutions. As a result, this project was designed with simplicity, accessibility, and practicality in mind. The most important aspect of this system is not the technical difficulty involved in designing the core components or writing the code. Rather, its effectiveness depends on the policies, procedures, and internal controls that your organization establishes to manage the process. The technical framework has already been developed—you simply need to implement and govern the process around it. For example, organizations should secure key files, restrict access to executable files, and control other critical elements of the system to maintain integrity and accountability. For most regulatory inspections and oversight reviews, having the technical components in place is only part of the requirement. Proper documentation, procedures, and evidence of internal controls are equally critical. My hope is that this project helps your organization meet regulatory expectations or, at the very least, provides a practical reference for building a compliant process.
This portal is designed to provide a secure, transparent, and efficient system for employees to disclose expenses in alignment with corporate governance and regulatory standards. It ensures accountability, traceability, and proper documentation across all submissions.
The platform supports compliance with key regulations, including SOX, anti-bribery, anti-fraud, and anti-corruption requirements. It is applicable across multiple jurisdictions, including North America, the United Kingdom, the European Union, Singapore, and other international markets.
Built with simplicity and efficiency in mind, the system requires minimal infrastructure and resources to operate. Estimated operating costs are approximately $80 per month, primarily for web hosting such as godaddy or etc. If you run your own web server and hosting then you won't have any cost. Compared to traditional enterprise solutions that can cost tens of thousands annually, this system provides a highly cost-effective alternative.
The architecture follows a zero-trust model and incorporates end-to-end encryption to ensure data security and integrity.
From a compliance perspective, the platform streamlines data management by supporting:
Key features include:
WHAT YOU WILL NEED FOR THE SETUP:
The system also complements existing financial tracking and accounting platforms, enhancing overall organizational visibility and control.
Overall, this solution enables a proactive approach to fraud detection and regulatory compliance, helping organizations identify risks early and maintain adherence to evolving standards.
This application, including all code and associated files, is the exclusive property of www.thugon.com and its developer. All rights reserved. This software is provided “as is” and “as available,” without any warranties or guarantees of any kind, express or implied. Use of this system is at the user’s own risk. By using this application, the user agrees to release the developer from any and all liability arising from its use. Limited modifications are permitted, provided proper credit is given to the original owner. Unlimited use of the system is allowed. However, this system may not be sold, marketed, transferred, or substantially modified without prior written consent from the developer. The developer reserves the right to update or modify this agreement and disclaimer at any time without prior notice. EXCEPTIONS AND CREDITS: www.thugon.com or the developer does not own the phpgansta Google authenticator library files. Credits to and Copyright (c) 2012, Michael Kliewe, used under his opensource.org license.