Platform overview
Platform overview
What is ProPay Engage360?
An enterprise creator-procurement, audit and payment control tower. PROPAY GLOBAL PRIVATE LIMITED is the single vendor of record for FMCG customers (Hindustan Unilever today; Nestle and Coca-Cola tenants seeded). ProPay intakes the agency plan, records the customer PO, onboards and KYS-verifies creators, issues back-to-back POs, fetches proof-of-execution, audits every deliverable and invoice with a deterministic rule engine plus ProPay Intelligent AI, clears lines for payment, routes payment memos to the customer approver and pushes them to the customer's procure-to-pay interface.
Two layers in one product
1) Procurement & payment backbone — AdFluence intake, Coupa aggregate PO mapping, creator OTP onboarding, KYS, back-to-back POs, advances, disbursements, W/M/Q reports. 2) Audit Control Tower (HUL Master Development Specification, v3.4 → v3.8) — Pre-Flight validation, Auto Fetch + webhook intake, rule engine R01–R12, AI content review with multi-frame video evidence, AI invoice intelligence with creator self-upload, reconciliation, exception inbox, audit clearance packs, KYS payment gate, payment memos with HUL approval and PTP hand-off, eight executive dashboards, integration readiness and a final classification report.
Design principles
Deterministic before probabilistic — rules decide, AI advises with evidence and confidence, humans override with a reason. Nothing is silently mocked: every external system sits behind a labelled adapter (LIVE or DEMO · SIMULATED) and the Readiness report states exactly what is needed to go live. Every action is audit-logged with actor, role, tenant and timestamp. Creators never see ProPay fees or customer PO values.
Current release
v3.8.0 · Creator Invoice Upload, Video Frame Sampler, Adfluence Webhook (HMAC), Presenter Autoplay. Fourteen seeded HUL campaigns cover one happy path and thirteen unhappy paths; sixteen Application Usage Scenarios script every click, and the floating Guided demo replays them with optional presenter autoplay.
Application capability map
Application capability map
Legend
LIVE = working end-to-end on real logic/AI · DEMO · SIMULATED = fully clickable behind a labelled simulator until the external party supplies credentials/contract · LIVE + DEMO = live core with a simulated fallback.
Campaign intake (AdFluence plan) — LIVE
Header + N creator lines pasted or typed by ProPay Operations → Campaign parent + one Order per creator, atomically. Plan & creative versioning with change history.
Aggregate PO (Coupa) recording & mapping — LIVE
Blanket, campaign-lined or creator-lined POs; manual form or paste-email intake; line-by-line mapping with mapped vs unmapped badges; utilisation bar; validity dates feed Pre-Flight and R05.
Creator onboarding & KYS — DEMO · SIMULATED
OTP self-registration (email + phone), PAN/Aadhaar/bank penny-drop/UPI/selfie capture, KYS queue and approval. Verification calls run through the Cashfree Secure ID adapter.
Back-to-back POs, advances, disbursements — LIVE + DEMO
Creator PO carries COGS only; advance on PO acceptance; auto final payment on last approval; disbursement queue with transaction reference; creator payment confirmation (payout rails simulated).
FR-01 Pre-Flight validation — LIVE
Nine checks PF01–PF09 (plan, creative approval, PO linked/valid/sufficient, creators onboarded, handles set, hashtag, timing) with fix-it links and an override-with-reason path. Campaign cannot proceed to audit until ready.
FR-02 Auto Fetch — pull adapter — DEMO · SIMULATED
Adfluence pull simulator with Demo/Live card, Sync Now, raw vs normalised records, accepted/rejected reasons, retries and metrics. Switches to the HTTP client when ADFLUENCE_API_KEY is set.
FR-02 Adfluence inbound webhook (v3.8) — LIVE + DEMO
POST /api/webhooks/adfluence — HMAC-SHA256 signature over {timestamp}.{body}, ±300 s replay window, idempotent delivery id, per-record acceptance with reasons, event log. Secret from ADFLUENCE_WEBHOOK_SECRET; self-signed test / tampered / replay deliveries are labelled DEMO · SIMULATED.
FR-03 Deterministic rule engine — LIVE
Twelve versioned rules R01–R12 (handle, hashtag, disclosure, timing, PO validity/limit, duplicate content, KYS, invoice number/duplicate/PO/amount) with configurable severity, evidence per result and an authority matrix for overrides.
FR-04 AI content review — LIVE
ProPay Intelligent AI (GPT-5.4 vision) checks brand/product presence, disclosure, hashtag and creative correspondence per frame with confidence; low confidence → NEEDS REVIEW; auditor override with reason. Never rates creative quality, never fabricates evidence.
FR-04 Video frame sampler (v3.8) — LIVE + DEMO
PyAV/FFmpeg decodes uploaded MP4/MOV/WebM and samples up to 8 evenly-spaced timestamped frames so brand checks cover the whole clip; URL-only content uses a bundled reel matching the seeded evidence (labelled). AI evidence cites timestamps.
FR-05 Invoice intelligence — LIVE
PDF/image → AI field extraction with per-field confidence → payee mapping → R09–R12 validation; sample invoices for valid / duplicate / over-limit / wrong-PO cases; field correction with audit trail.
Creator invoice upload (v3.8) — LIVE
Creators and agencies upload their own invoice against an accepted PO line and track Uploaded → Extracted (confidence %) → Mapped → Validated / Needs review / Failed with rule results; Operations is notified.
Reconciliation — LIVE
Per creator line: approved vs PO allocation vs invoiced vs paid, deliverables planned vs fetched, AI and rule status, variance with plain-language explanation; campaign totals.
Exception inbox — LIVE
Rule, AI and invoice failures become exceptions with severity, owner, SLA, assignment, correction request, resubmission, approve/close and a full history — the human-in-the-loop layer.
Audit clearance & Audit Pack — LIVE
Line-level clearance once rules pass and exceptions are closed; downloadable Audit Pack PDF with evidence, rule results, AI verdicts and invoice trail for the auditor's file.
KYS gate, payment memos, HUL approval, PTP — LIVE + DEMO
Payment memo only for cleared + KYS-verified lines; HUL Approver approves/rejects (idempotent states); approved memos posted to the PTP adapter and advanced to paid with a timeline.
Control Tower dashboards — LIVE
Eight executive views — executive, campaigns, POs, audit, exceptions, payments, AI quality, integrations — tenant-scoped with drill-down.
Integration readiness & classification report — LIVE
Seven adapters with interface contract, sample payload, production dependency and go-live step; 22-row BUILT / PARTIAL / MISSING / INTEGRATION-BLOCKED / DEMO-SIMULATED matrix and a §28 self-test checklist, both as PDF.
Usage scenarios, Guided demo, Presenter autoplay — LIVE
Sixteen step-by-step scripts with credentials (JSON + PDF); floating Guided demo highlights the next tab/button, follows you across logins, and autoplays with timed captions at 0.5–2× for boardroom demos.
Reports, Copilot, PunchOut — LIVE
Weekly/monthly/quarterly reports with CSV/PDF; in-app AI Copilot with session memory; /onebuy PunchOut demo that launches a customer session from a procurement portal.
Notifications & OTP delivery — DEMO · SIMULATED
In-app inbox is live; e-mail/SMS transport for OTPs and notices runs in DEMO_MODE (codes shown on screen) until Twilio/Resend keys are supplied.
What's new — release notes
What's new — release notes
v3.8.0 · June 2026 — Creator upload, video frames, webhook, autoplay
Creator desk → Invoices: creators/agencies upload their own invoices and watch extraction, mapping and validation in real time. Video frame sampler: PyAV decodes uploaded clips into timestamped frames and the AI review evaluates all of them. Live Adfluence webhook with HMAC-SHA256, replay protection and idempotency plus test/tamper/replay buttons. Presenter autoplay in the Guided demo. Sixteen usage scenarios, 22-row classification matrix, Platform Guide rewritten. Code-quality pass: shared runtime moved to core.py, hook/key/ternary clean-ups.
v3.7.0 — Control Tower, Integration Readiness, Classification report, Guided demo
Eight executive dashboards; Integrations page with LIVE / DEMO · SIMULATED cards and go-live steps; Final classification report (PDF); floating Guided demo mode that highlights the next click and tells you which user to sign in as.
v3.6.0 — Exception inbox, Audit clearance pack, Payment memo flow
Exceptions with owners, SLAs and history; line-level clearance and Audit Pack PDF; KYS gate; payment memos approved by the new HUL Approver role and pushed to the simulated PTP; Application Usage Scenarios (with credentials, PDF) and a globalised AI-first landing page.
v3.5.0 — Auto Fetch, AI content review, Invoice intelligence, Scenario switcher
Adfluence pull adapter with raw/normalised records; GPT-5.4 vision content review with evidence, confidence and override; AI invoice extraction with confidence and R09–R12 validation; demo scenario switcher across fourteen seeded campaigns.
v3.4.0 — Pre-Flight validation & deterministic rule engine
PF01–PF09 pre-flight checks with fix-it links and overrides; versioned rule engine R01–R12 with severity configuration, evidence and authority matrix; roles renamed to the HUL specification (HUL Media Finance, HUL Approver, Auditor, ProPay Operations, Creator / Agency).
v3.0 – v3.3 — Procurement & payment backbone
AdFluence intake, Coupa aggregate PO with line mapping, OTP onboarding + KYS, back-to-back POs, advances, auto final payment, disbursements, reports, Copilot, PunchOut, cookie-based auth and security hardening.
End-to-end business process
End-to-end business process
Step 1 — Campaign approved inside the customer
Brand and marketing teams approve the campaign internally and brief the agency (AdFluence). ProPay has no visibility — out of scope by design.
Step 2 — Agency plan reaches ProPay
AdFluence sends the finalised creator plan (creators, deliverables, fees, terms, advances, dates). ProPay Operations intakes it → Campaign + one Order per creator. Plan and approved creative are versioned.
Step 3 — Customer PO recorded and mapped
The customer raises an aggregate PO in Coupa payable to ProPay. Operations records it (manual or paste-email) and maps lines to campaigns/creators; validity and headroom feed Pre-Flight and rules R05/R06.
Step 4 — Creator onboarding, KYS, back-to-back PO
Creators register with OTP, complete KYS (verified through the KYS adapter), accept the back-to-back PO (COGS only) and receive any authorised advance.
Step 5 — Pre-Flight validation (FR-01)
Before any content is judged, PF01–PF09 confirm plan, creative approval, PO link/validity/limit, creator onboarding, handles, hashtag and timing. Failures link straight to the fix; authorised roles may override with a reason.
Step 6 — Proof of execution arrives (FR-02)
Content records arrive by Adfluence webhook (signed), by Auto Fetch pull, or by creator upload. Each record is normalised, matched to the planned deliverable and stored with capture evidence.
Step 7 — Rule audit (FR-03)
The deterministic engine runs R01–R12 over deliverables and invoices — handle, hashtag, disclosure, timing, PO validity/limit, duplicates, KYS, invoice checks — producing PASS / FAIL / NEEDS REVIEW with evidence.
Step 8 — AI content review (FR-04)
For visual conformance the auditor samples frames (video) and runs ProPay Intelligent AI: brand, product, disclosure, hashtag and creative correspondence with confidence and frame timestamps. Low confidence routes to a human; overrides are recorded.
Step 9 — Invoices (FR-05)
Creators upload their own invoice from the creator desk or Operations uploads on their behalf. AI extracts fields with confidence, maps the payee and validates against PO and approved cost (R09–R12).
Step 10 — Reconciliation
Approved vs PO allocation vs invoiced vs paid per creator line, with deliverable counts, AI and rule states and a plain-language variance explanation.
Step 11 — Exceptions
Every FAIL / NEEDS REVIEW becomes an exception with severity, owner and SLA. Assign → request correction → resubmit → approve → close, all in the history.
Step 12 — Audit clearance & Audit Pack
When rules pass and exceptions are closed, the line is cleared and the Audit Pack PDF (evidence, rules, AI, invoices) is generated for the auditor's file.
Step 13 — KYS gate and payment memo
A payment memo can be created only for cleared lines whose creator is KYS-verified. Memo states are idempotent and time-stamped.
Step 14 — HUL Approver decision
The customer's approver approves or rejects the memo. Approved memos are posted to the procure-to-pay adapter (PTP) and advanced to paid; rejected memos free the line for a fresh memo.
Step 15 — Disbursement, confirmation, proof
ProPay disburses to the creator, records the transaction reference; the creator confirms receipt and uploads proof of payment.
Step 16 — Control Tower & reporting
Executives follow campaigns, POs, audit, exceptions, payments, AI quality and integrations in the Control Tower; W/M/Q reports export to CSV/PDF; the Readiness report states what remains to go live.
RACI — Who does what
RACI — Who does what
Legend
R = Responsible · A = Accountable · C = Consulted · I = Informed. Parties: HUL Marketing / Media Finance (customer) · HUL Approver · Agency (AdFluence) · ProPay Operations · Auditor (EY) · Creator / Agency · ProPay Admin (L3) · System / AI.
Step 1 · Campaign approval inside the customer
HUL Marketing: R + A · Agency: I · ProPay: — · Creator: — · Auditor: I
Step 2 · Agency plan intake
Agency: R · ProPay Operations: A (intake, versioning) · HUL Marketing: C · Creator: C · Auditor: I
Step 3 · Customer PO recorded & mapped
HUL Media Finance: R (raises PO) · ProPay Operations: A (records, maps) · Auditor: C · Creator: —
Step 4 · Creator onboarding, KYS, back-to-back PO
Creator: R (registers, KYS) · ProPay Operations: A (verifies, issues PO) · Auditor: C · HUL: I
Step 5 · Pre-Flight validation
System: R (checks) · HUL Marketing / ProPay Operations: A (fixes, overrides with reason) · Auditor: C · Creator: I
Step 6 · Proof of execution intake
System / Agency webhook: R · ProPay Operations: A (monitor, retries) · Creator: R (uploads) · Auditor: I
Step 7 · Rule audit
System: R · Auditor: A (reviews evidence) · ProPay Operations: C · HUL: I
Step 8 · AI content review
AI: R (directional, evidenced) · Auditor: A (override with reason) · HUL Marketing: C · Creator: I
Step 9 · Invoices
Creator: R (uploads) · AI: R (extracts) · ProPay Operations: A (corrects, validates) · Auditor: C
Step 10 · Reconciliation
System: R · ProPay Operations: A · HUL Media Finance: C · Auditor: C
Step 11 · Exceptions
ProPay Operations: R + A (assign, correct, close) · Auditor: A (approve) · Creator: R (resubmit) · HUL: I
Step 12 · Audit clearance & Audit Pack
Auditor: R + A · ProPay Operations: C · HUL: I
Step 13 · KYS gate & payment memo
ProPay Operations / HUL Marketing: R (create memo) · System: R (gate) · HUL Approver: I
Step 14 · Payment approval & PTP
HUL Approver: R + A · System: R (PTP post) · ProPay Operations: C · Auditor: I · Creator: I
Step 15 · Disbursement, confirmation, proof
ProPay Operations: R + A · Creator: R (confirms, PoP) · HUL: I
Step 16 · Control Tower & reporting
ProPay: R + A · HUL: I (dashboards) · Auditor: C · Agency: —
User levels & access
User levels & access
Legend
Six user levels, each with its own home, navigation and data scope. All password accounts in the demo use Propay@2026; creators sign in with OTP (codes shown on screen in DEMO_MODE). Every level can open Control Tower, Integrations, Readiness report and Usage scenarios.
Level 1 · HUL Media Finance (customer)
Login: marketing@unilever.example · Home: /customer · Can: view campaigns & audit, run Pre-Flight, rule audit, AI review, invoices, reconciliation, exceptions, clearance, create payment memos, Auto Fetch monitor + webhook tests, reports, rules & authority, branding · Cannot: approve payment memos, create orders, see other tenants
Level 2 · HUL Approver
Login: approver@hul.example · Home: /approver · Can: approve or reject payment memos after clearance + KYS gate, read campaigns and exceptions, view Control Tower · Cannot: edit plans, run audits, override rules
Level 3 · ProPay Operations (procurement desk)
Login: procurement@propay.ai (also desk@propay.ai) · Home: /procurement · Can: AdFluence intake, aggregate PO recording & mapping, creator onboarding, KYS queue, back-to-back POs, disbursements, exception ownership, payment memos, Auto Fetch + webhook, invoice upload & correction, reports · Cannot: approve memos as customer, act as auditor
Level 4 · Auditor (EY)
Logins: rao.krishnan@ey.example · meera.iyer@ey.example · arjun.mehta@ey.example · Home: /ey · Can: review deliverables, KYS and evidence, run and override rule/AI results with reason, approve exceptions, clear lines, download Audit Packs, audit trail, reports · Cannot: edit commercial data or pay
Level 5 · Creator / Agency
Login: OTP with priya.influencer@example.com / +91-9876543210 (others in Usage scenarios) · Home: /influencer · Can: KYS, accept POs, upload deliverables, upload & track own invoices, payments, confirm receipt, proof of payment · Cannot: see ProPay fees, customer PO values or other creators
Level 6 · Administrator · L3 (ProPay Admin)
Login: areddy@propay.ai · Home: /admin · Can: everything above across all tenants, impersonation for support, customers & branding, rules & authority, immutable audit log · Every override captured with actor, reason and impersonated user
Where each step lives (screens)
Where each step lives (screens)
Campaign detail (all audit roles)
<home>/campaigns/:id tabs → Overview · Pre-Flight · Plan & Creative · PO Controls · Creators · Deliverables / PoE (Auto Fetch, AI review, frame sampler) · Rule Audit · Invoices · Reconciliation · Exceptions · Clearance · Payment
HUL Media Finance
Dashboard → /customer · Campaigns & audit → /customer/campaigns · Orders → /customer/orders · Exception inbox → /customer/exceptions · Payment memos → /customer/payments-memos · Auto Fetch monitor + Webhook → /customer/autofetch · Reports → /customer/reports · Rules & authority → /customer/rules · Request status update → /customer/status-request · Branding → /customer/admin
HUL Approver
Payment approvals → /approver · Campaigns → /approver/campaigns · Exception inbox → /approver/exceptions · Control Tower → /approver/tower
ProPay Operations
Campaigns (AdFluence) → /procurement/campaigns · New intake → /procurement/campaigns/new · Aggregate POs (Coupa) → /procurement/aggregate-pos · Order queue → /procurement/orders · Influencer master → /procurement/influencers · KYS queue → /procurement/compliance · Back-to-back POs → /procurement/pos · Disbursements → /procurement/payments · Exception inbox → /procurement/exceptions · Payment memos → /procurement/payments-memos · Auto Fetch monitor + Webhook → /procurement/autofetch · Reports → /procurement/reports
Auditor (EY)
Dashboard → /ey · Campaigns → /ey/campaigns · Pending reviews → /ey/deliverables · Exception inbox → /ey/exceptions · Auto Fetch monitor → /ey/autofetch · Reports → /ey/reports · Audit trail → /ey/audit
Creator / Agency
Dashboard → /influencer · KYS → /influencer/kys · My POs → /influencer/pos · Deliverables → /influencer/deliverables · Payments → /influencer/payments · Invoices (upload & track) → /influencer/invoices · Inbox → /influencer/notifications
Administrator · L3
Everything under /admin (orders, influencers, KYS, POs, deliverables, payments, campaigns, aggregate POs, exceptions, payment memos, rules, customers & branding, audit log)
Every level
Control Tower → <home>/tower · Integrations → <home>/integrations · Readiness report → <home>/readiness · Usage scenarios (PDF) → <home>/scenarios · Inbox → <home>/notifications · Guided demo → floating button, bottom-right
Public
Landing → / · Platform guide → /guide · Sign in → /login · PunchOut demo → /onebuy
Integrations & go-live checklist
Integrations & go-live checklist
Adfluence — webhook (LIVE) + pull adapter (DEMO · SIMULATED) — LIVE + DEMO
Share the webhook URL and set ADFLUENCE_WEBHOOK_SECRET; deliveries are verified, de-duplicated and logged immediately. For pull mode set ADFLUENCE_API_KEY and switch the Auto Fetch card to LIVE; confirm field names, pagination and rate limits.
ProPay Intelligent AI — content review & invoice extraction (LIVE) — LIVE
GPT-5.4 vision via the platform key. For production, supply a provider key and budget; prompts, confidence thresholds and override flow are unchanged.
HUL ERP / SAP purchase orders (DEMO · SIMULATED) — DEMO · SIMULATED
PO header/lines currently recorded by paste-email or form. Go-live: Coupa/SAP outbound PO feed or mailbox parser mapped to the aggregate PO contract shown on the Integrations page.
HUL Procure-to-Pay (PTP) (DEMO · SIMULATED) — DEMO · SIMULATED
Approved payment memos are posted to a simulator that advances submitted → accepted → paid. Go-live: PTP endpoint, auth and status callback.
KYS / KYC — Cashfree Secure ID (DEMO · SIMULATED) — DEMO · SIMULATED
Name match, penny drop and VPA checks run in demo mode. Go-live: CASHFREE_CLIENT_ID / SECRET and CASHFREE_MODE=live.
ProPay creator disbursement rails (DEMO · SIMULATED) — DEMO · SIMULATED
Disbursement records and references are simulated. Go-live: payout provider credentials and webhook for settlement status.
OTP & notifications (DEMO_MODE) — DEMO · SIMULATED
Codes and notices are shown in-app. Go-live: Twilio (SMS) and Resend/SendGrid (e-mail) keys; set DEMO_MODE=false.
Where to check status
Integrations page (<home>/integrations) shows each adapter's mode, last activity and go-live step; the Readiness report (<home>/readiness) gives the 22-row classification and the §28 self-test checklist, both downloadable as PDF.
Security, audit & compliance
Security, audit & compliance
Authentication & sessions
Staff, customer, approver and auditor users authenticate with e-mail/password; sessions are HttpOnly cookies with brute-force lockout. Creators use e-mail + phone OTP with attempt limits. All access is tenant- and role-scoped with HTTP 403 on out-of-scope requests.
Immutable audit log
Every mutation — intake, PO recorded/mapped, KYS decision, pre-flight run/override, rule run, AI review/override, invoice ingest/correction, exception action, clearance, memo state, webhook test, frame sampling — is written with actor id, e-mail, role, tenant, entity and timestamp.
Deterministic, versioned rules
Rule versions and severity changes are recorded; every result carries the rule version and evidence so an audit finding can be reproduced later.
AI guardrails
ProPay Intelligent AI only asserts what is evidenced in the supplied frames and caption, returns confidence per requirement, downgrades low confidence to NEEDS REVIEW and never rates creative quality. When no evidence exists it says so rather than guessing. Overrides require a reason and keep the original verdict.
Webhook security
Adfluence deliveries must carry a valid HMAC-SHA256 signature computed with the shared secret over {timestamp}.{raw body}; stale timestamps (±300 s) and replayed delivery ids are rejected and logged.
Honest simulation
Anything not yet connected to a real counter-party is labelled DEMO · SIMULATED in the UI, on the Integrations page and in the classification report — never presented as live.
Demo playbook
Demo playbook
Fastest tour (10 minutes)
Sign in as marketing@unilever.example → Campaigns → 'Jump to demo scenario' → Happy path → Pre-Flight (Run) → Deliverables / PoE (Sync, AI review with Sample frames) → Rule Audit → Invoices (sample) → Reconciliation → Clearance (Clear line, Audit Pack) → Payment (Create memo) → sign in as approver@hul.example → Approve → PTP to paid.
Guided demo & presenter autoplay
Click the floating 'Guided demo' button on any screen, choose a scenario and press Play: the app navigates to each step, highlights the tab/button, shows a timed caption and pauses when a different login is needed. Speed 0.5×–2×, Restart anytime.
Unhappy paths
Thirteen seeded campaigns each break one thing — expired PO, missing creative, wrong handle, missing disclosure, late post, duplicate content, KYS incomplete, invoice over limit / duplicate / wrong PO, Auto Fetch failure, memo rejection — so every rule and exception route can be shown live.
v3.8 highlights to show
Creator desk → Invoices (OTP login) → Generate sample invoice → watch the pipeline; Auto Fetch monitor → Webhook card → Send test event / tampered signature / replay; AI review → Sample frames → film-strip with timestamps → Run AI review.
Where the scripts live
<home>/scenarios lists all sixteen Application Usage Scenarios with credentials, steps and expected results, downloadable as PDF.
