Who we are

Friday File is certified payroll collection and validation software for prime contractors and their subcontractors on public work. The service is operated by Monarch Labs (contact via your organization's account owner or support channel).

Data we process

• Account data — name, email, organization membership, and authentication events.
• Payroll and compliance documents — WH-347 forms, payroll registers, worker names, classifications, hours, rates, and signatures submitted for a project pay period.
• Device data (mobile app) — photos you capture, push notification tokens, and basic app version metadata. We do not collect precise location, contacts, or microphone audio.
• Technical logs — request identifiers, error reports (when Sentry is enabled), and rate-limit counters hashed with a server salt (no raw IP stored in application logs by default).

Why we process it

To collect subcontractor certified payroll, validate it against wage determinations, produce audit trails for your organization, and notify reviewers when action is required. AI-assisted extraction runs only on documents you upload and is configurable by your operator.

Subcontractor portal

Subcontractors access Friday File through a unique link (token). They do not receive a standing account unless invited separately. Submissions require an explicit Statement of Compliance attestation; scanned signatures are rejected by policy.

Retention and security

Data is stored in Supabase (Postgres and object storage) with row-level security per organization. Production deployments require TLS, rate limiting on public routes, and separation of service-role credentials from client bundles. Retention follows your organization's contractual and regulatory requirements — configure archival and export with your administrator.

Your choices

Organization administrators manage membership and can request export or deletion subject to legal hold and payroll record retention rules. Mobile users can revoke camera or notification permissions in device settings; core capture features require camera access.