Settings (TPA)
| Setting | Meaning |
|---|---|
ADMIN_USER / ADMIN_PASSWORD | First administrator, created on first start. |
SESSION_SECRET | Random text that protects sign-ins. Render generates one. |
MFA_REQUIRED | 1 requires two-step sign-in for every account from the first start. Otherwise an administrator turns it on in 👥 Users & access. |
FIRM_NAME | Your company name on the report-a-claim page, in the portal and in emails. |
ANTHROPIC_API_KEY | Optional. Turns on AI for everyone signed in. |
PORTAL | 0 starts with the client portal off. Default on. |
SIGNUP_CODE / SIGNUP_OPEN | Optional starting company code, and 1 to open the sign-up link at first start. |
SESSION_HOURS | How long a sign-in lasts. Default 12. |
CERT_SIGNING_KEY, CERT_VOUCHER_SECRET | Turn on Academy exams and signed certificates. Make them with node tools/academy-keys.js; use the same values on every workspace. |
ACADEMY_WORKSPACE | Optional. The workspace name vouchers are tied to. Default: the host name in APP_URL. |
ACADEMY_DEMO | 1 for practice mode: exams need no voucher and certificates are marked PRACTICE. The start files use it. |
OFFICE_DATA_KEY | Encrypts tax ID numbers, bank account numbers and documents in the back office. Render generates one. Keep a copy and never change it. Without it, a practice key is made in DATA_DIR/office – fine on your computer, not for real data. |
APP_URL | Your Claimsfy address, used in email links. |
COMPANY_EMAIL_DOMAINS | Staff must use an address at your domain. This doesn't apply to client portal users or claim reporters. |
DATA_DIR, TZ, MAIL_, SMTP_, GRAPH_*, ALLOWED_MODELS, TRUST_PROXY, ADMIN_ONLY | Same as the main Claimsfy team server. |
Email delivery (👤 → Email & notifications) is worth setting up for this edition. It sends:
- confirmations to people who report claims
- portal invitations
- emails to client users when you message them, share a document or ask for authority
- notifications to your team