HR management · embeddable module
Cadre is a complete HR system packaged as a module. Your host product keeps its own authentication, sessions and tenancy — Cadre never asks you to change any of it, and never touches a table it doesn't own.
The seam everything hangs off
Every host product already has users, orgs and roles. Naive HR modules assume employee == user and break in week two — because employees who never log in still need payslips and leave balances, and host users who aren't employees must never appear in headcount.
Four decisions that can't be retrofitted
Valid time records when a fact was true; recorded time records when we learned it. That's what makes a change different from a correction — and what lets a March payslip still be explained in September.
A position is a seat that exists whether or not anyone sits in it. Without it, vacancy tracking, headcount budgets and “this req backfills that exit” are simply unanswerable.
Approvals are configured definitions that resolve by walking up the org tree. A region adds a step; every unit beneath it inherits without re-keying, and a new unit is correct the moment it's created.
Roles attach to positions and org units, not to people — so access follows a transfer automatically, and stops at the edge of the scope it was granted in. Revocation by default.
Why it stays pluggable
A customer needs an extra approval step. A developer adds it. That tenant now runs slightly different code. At three tenants it's annoying; at fifteen you can never ship a statutory rate update again without fifteen merges.
So configuration is the load-bearing requirement, not an ergonomic nicety. Leave types, employment types, approval routes, overtime multipliers, notification rules, review forms and security policies are all data — and behaviour reads flags on a row rather than branching on a string.
Configurability without governance is just a faster way to break production — so security changes stage as pending and need explicit activation.
Build order
Org tree, people, positions, effective dating, business processes, positional security, tenant isolation, audit, headcount reconciliation.
Accrual engine, location holiday calendars, balances derived from a ledger, carry-forward and lapse, leave liability in currency.
Onboarding and offboarding checklists driven by the BPF, document vault, outbound webhooks so Custos can revoke access on exit.
Shifts, rosters, day classification, the premium rule engine with statutory floors, caps and an explain trace on every line.
Rate tables, statutory components, compliance calendar. Refuses a live run until its rates are verified against current law.
The five admin personas, the configuration surface, report builder, and opinionated preset bundles so nobody starts from an empty screen.
Reviews with company values, comp cycles, internal job postings, talent marketplace.