Groupware is a system used daily by every member of an organization, and approval documents are official records of corporate decisions with legal force. Therefore, incorporating the legal validity of electronic approvals, document retention obligations, and personal data processing standards from the system design stage is critical. VEXPLOR Groupware embeds core requirements of major domestic and international standards into its data structure, structurally managing audit compliance and legal risk.
Electronic Approval Standards and Practices
Why does this standard matter?
Electronic approvals document critical corporate decisions including purchase approvals, contract executions, and safety work permits. If the approval process has legal defects, the validity of contracts may be challenged, and if approval histories are incomplete during audits, internal control deficiencies may be flagged. For Korean companies, ensuring the legal validity of electronic signatures under the Korean Electronic Signatures Act is essential.
How is it applied in VEXPLOR?
| Approval Standard/Practice | Impact on Your Business | How VEXPLOR Addresses It |
|---|
| Multi-level Sequential Approval | The fundamental approval structure in Korean enterprises, requiring clear approval authority by position | Processed sequentially according to approval chain step order (step_order) |
| Parallel Approval | Some approval types require simultaneous processing such as review, concurrence, and notification | Parallel processing enabled through approver type (approver_type) differentiation for review/concurrence/notification |
| Amount-Based Auto-Routing | Approval authority varying by amount is a basic internal control | 5-tier amount ranges with category-based (general/procurement/ERP/safety/HR) routing rules applied |
| Delegation/Proxy | Must prevent work delays during approver absence while clarifying accountability | Dual system of approval delegation (approval_delegation_rules) and work delegation (user_delegations) automatically managed through workflows |
| Electronic Signatures | Must ensure legal validity of electronic signatures under the Electronic Signatures Act | Three methods built in: PKI (certified), image signature, OTP -- compliant with the Korean Electronic Signatures Act |
| Emergency Approval | Approval delays in urgent situations can affect business opportunities or safety | Priority levels (normal/urgent/emergency) distinguished with post-facto approval support |
| Audit Trail | Incomplete approval history during audits results in internal control deficiency findings | All approval actions and document changes recorded with timestamp, processor, and IP address |
ISO 15489 -- Records Management Standard
Why does this standard matter?
ISO 15489 is the international standard for systematically managing the entire lifecycle of corporate documents from creation to disposal. Managing document retention obligations (5 years for tax-related documents, 10 years for contracts, etc.) and maintaining a document management system usable as evidence during litigation or audits is based on this standard. Document management system adequacy is also verified during ISO certification audits.
How is it applied in VEXPLOR?
| ISO 15489 Requirement | Impact on Your Business | How VEXPLOR Addresses It |
|---|
| Document Classification | Poor document classification makes search and management difficult | Hierarchical folder structure (gw_doc_folders) and file type classification supported |
| Version Control | Version confusion can lead to decision-making based on wrong documents | Previous versions are automatically preserved on modification with per-version change summaries recorded |
| Access Control | Lack of access controls for confidential documents creates information leakage risk | Read/write/admin permissions set per document/folder by user, department, and role |
| Retention Period Management | Non-compliance with statutory retention periods creates legal risk | Retention period fields and monthly archival lifecycle workflow (WF9) for automated management |
| Document Review/Approval | Sharing unreviewed documents poses quality risk | Review workflow (WF5) ensures review/approval before document publication |
| Archival/Transfer/Disposal | Leaving expired documents unmanaged may violate data protection regulations | Archive records (snapshot storage) and workflow (WF9) handle archival/extension/auto-archival |
| Check-Out/Check-In | Must prevent data loss from concurrent editing | Check-out blocks concurrent modifications with timeouts configured to prevent long-term locks |
RFC 5545 (iCal) / CalDAV -- Calendar Management Standards
Why does this standard matter?
RFC 5545 is the IETF internet standard for calendar data exchange. Following this standard enables schedule synchronization with external calendars (Outlook, Google Calendar, etc.) and accurate representation of recurring events. This ensures extensibility for integration with external systems rather than locking schedules within internal systems only.
How is it applied in VEXPLOR?
| Standard Requirement | Impact on Your Business | How VEXPLOR Addresses It |
|---|
| RRULE Recurring Events | Weekly meetings, monthly reports, and other recurring events must be accurately managed | Recurring events managed per RFC 5545 RRULE specification (e.g., FREQ=WEEKLY;BYDAY=MO,WE,FR) |
| All-Day Events | Full-day events, training sessions, etc. must display on calendars | All-day events distinguished via all_day field |
| Attendee Management | Meeting attendee confirmation and response management needed | Per-event attendee lists are managed |
| Reminders | Must prevent missing important schedules | Per-event reminder settings supported |
| Cross-Solution Integration | ERP deadlines, HR training, project milestones must be visible in one calendar | External solution schedules automatically integrated into the calendar via source_block/entity/record_id |
DMN (Decision Model and Notation) -- Decision Model Standard
Why does this standard matter?
DMN is a decision modeling standard established by OMG (Object Management Group) that enables managing business rules through decision tables rather than code. For frequently changing business rules like approval routing, business users can modify rules directly without developers, accelerating response to organizational or regulatory changes. Using BPMN (process model) and DMN (decision model) together is a best practice in enterprise-grade workflow architecture.
How is it applied in VEXPLOR?
Approval routing business rules (amount-based approval chains, category branching, exception handling) are managed as DMN decision tables. When rules change, modifications in the table take effect immediately without coding, and all rule evaluation history is recorded in execution logs for audit trail purposes.