Skip to content
§ the product

The compliance OS for CPA firms.

Receive every notice, cross-reference against your payroll, and file the response — with a hash-chained audit pack on every action. Built for firms that audit themselves before the state does.

SOC 2 Type II ·  renewed Jan 20267 compliance categories ·  47 statesAudit packs ·  verifiable for 7 years
§ the workflow

Three operations. One ledger.

Most claim-response software stops at “draft.” Kreto handles receipt, cross-reference, and filing — and signs every step into one audit pack so you don't have to reconstruct the trail later.

01 · Receive

From any state, into one inbox.

Mail-scan integration in 47 states, direct API in CA · NY · TX · WA. Notices land parsed — claimant, employer, separation date, deadline — routed within 4 minutes of receipt.

/notices · today
09:14Reyes, M. · CA EDD4d
09:48Patel, A. · NY DOL7d
11:02Cho, J. · TX TWC14d
14:23Brown, T. · WA ESD10d
02 · Cross-reference

The agency's number, against your payroll.

Drafts pull facts from your payroll provider — ADP, Paychex, Intuit, Gusto, Rippling — and apply state-specific separation rules. Discrepancies surface as line-level deltas you can cite.

/notices/N-2026-0418-3104/xref
09:31Facts pulled · ADP RUNb3d7
09:34Δ flagged · §1256c1e9
11:02Sudheer M. · 2 editsd4a1
11:04Approved · partner sign-offready
03 · File

Direct submission. Confirmation receipts.

SIDES integration in select states; portal-assisted submit elsewhere. Filing receipt is captured automatically, hashed, and added to the audit pack alongside every prior step.

/audit-packs/AP-2026-Q2-N3104
14:48Filed · SIDES CAe7b2
14:48Confirmation capturedf1d3
14:48Pack sealed · Merkle rootac84
·Verifiable for 7 yearssealed
§ what we cover

Seven categories. Every state.

Kreto handles the entire employer-compliance perimeter — from unemployment insurance and payroll tax to ACA penalty letters and ICE I-9 audits. Each category has its own state-specific rules engine and document templates.

SUI

Unemployment Insurance

SUI rate verification, voluntary contribution analysis, separation responses via SIDES, charge protests, benefit-charge audits.

  • rate verification
  • SIDES e-response
  • voluntary contribution
IRS

Payroll Tax

IRS notices (CP2000, 941, 940), state withholding mismatches, FUTA reconciliation, deposit-schedule penalties, abatement requests.

  • CP2000
  • 941 / FUTA
  • abatement letters
WC

Workers Compensation

Class-code audits, premium reconciliation, e-mod tracking, audit-dispute letters, NCCI / state-rating-bureau correspondence.

  • class-code audit
  • e-mod tracking
  • audit dispute
PFML

Paid Family Leave / SDI

State PFML / TDI / SDI contributions, eligibility verifications, voluntary-plan filings, employer rate notices, claim denials.

  • contribution audits
  • voluntary plans
  • claim denials
DOL

Wage & Hour

DOL audits, overtime reclassifications, FLSA exemption disputes, state minimum-wage compliance, wage-theft claims.

  • DOL audits
  • FLSA exemptions
  • minimum-wage drift
I-9

Employment Verification / I-9

I-9 audits, E-Verify discrepancies, ICE NOI responses, document-retention compliance, retroactive I-9 corrections.

  • I-9 audits
  • E-Verify
  • ICE NOI
ACA

ACA / Benefits

Letter 226-J penalty assessments, 1094-C / 1095-C corrections, affordability-safe-harbor disputes, full-time-equivalent audits.

  • Letter 226-J
  • 1095-C corrections
  • FTE audits
§ the engine

The agency's number, against your payroll.

Most claim-response software stops at “here's a draft letter.” Kreto's cross-reference engine reads the notice, pulls the matching pay-period facts from your payroll provider, and surfaces every line-level discrepancy with a citation.

step 1

Classify the notice

OCR + LLM extract claimant, employer, agency, jurisdiction, period, action required, deadline. PII redacted before any model call. Confidence score on every field.

step 2

Pull the matching facts

The engine queries your payroll provider for the exact pay periods the notice references — gross wages, separation date, employment dates, contributions — and hashes the source row.

step 3

Compute the delta

State-specific rules (e.g. CA UI §1256, NY UI base period) run against the agency's number vs. your payroll's number. The output is a line-by-line discrepancy with citations.

/notices/N-2026-0418-3104/xref · sample
agency_amount$8,420.00
payroll_amount$7,180.00
delta=−$1,240.00 · §1256
sample data · not a real notice
§ the audit pack

Every action signed. Every pack verifiable.

When a state wants to know what happened, you don't reconstruct from email and screenshots. You hand them a pack. Each pack is a hash-chained record of every notice action — receipt, edit, sign-off, filing — with a Merkle root anyone can verify offline.

For a CPA firm, the pack isthe work. The interface is just how it's assembled.

  • SHA-256Per-action hash chain — receipt → draft → review → file. No silent edits.
  • RFC 3161Trusted timestamps on every action, sourced from a US-TSA-anchored authority.
  • MERKLEOne root per pack. Verify the entire pack with a single 32-byte hash.
  • 7 YEARRetention matches IRS record-keeping. PDF + JSON · downloadable any time.
audit-pack.AP-2026-Q2-N3104
Reyes, M. · CA EDD · sealed Apr 22 14:48:23 UTC
events · 14
notice.receiveda8f2 9c1e
notice.parsed92cb 4d70
facts.pulled · adp_runb3d7 4f0a
facts.verified · 3 paystubs5e8a 8137
draft.generated · §1256c1e9 7b22
draft.edited · sudheer.md4a1 0f93
draft.approved · partner71f0 cd5b
filing.submitted · sidese7b2 ac84
filing.confirmed · sx-44021f1d3 22e7
artifacts · 7
notice.original.pdf · 312 kb0a2c
response.final.pdf · 184 kb9b8e
facts.json · 4.2 kb3f7a
filing-confirmation.pdf · 22 kbd109
✓ MERKLE ROOT VERIFIEDe7b27c11a4d309ac84f1d322e791b8e0a2c93f7a5e8a8137c1e97b22d4a10f93
Sample audit pack · identifying details fictional
§ infrastructure

Built on the rails states already use.

Kreto does not screen-scrape portals or rely on email-parsing hacks. We are a registered participant in the national electronic exchange systems that power state compliance.

SIDES E-RESPONSE

NASWA Agreement

Kreto holds a signed SIDES E-Response agreement with the National Association of State Workforce Agencies. UI claims and responses flow electronically through the SIDES Central Broker — the same system used by ADP, Equifax, and every major TPA.

TPA REGISTRATION

50-state coverage

Registered as a Third Party Administrator in all 50 states plus DC. Each registration is maintained with current surety bonds and state-specific compliance filings. Your employer clients get nationwide coverage from day one.

§ integrations

Where your firm already keeps the facts.

Drafts pull employment dates, separation reasons, and wages directly from your payroll provider. No duplicate data entry; no copy-paste mistakes; every fact is sourced and citable in the audit pack.

ADP RUN
api · live
ADP Workforce Now
api · live
Paychex Flex
api · live
Intuit QuickBooks
api · live
Gusto
api · live
Rippling
api · live
Justworks
csv · live
BambooHR
csv · live
Trinet
api · Q3
Paylocity
api · Q3
§ customer outcome

We don't reconstruct anything. The audit pack is the response. When the state called about a 2024 charge, I downloaded one PDF and the question was over.

Elena Marquez, CPA composite
Partner · Marquez & Bell · 480-employee book of business · 7 states · sample case study
Median response time · Marquez & Bell
11 days4 days
before kretoafter, 6 mo.
§ security

Your data never leaves the vault.

Compliance data includes SSNs, wages, and employer tax IDs. Kreto treats every byte as if it were our own — encrypted at rest and in transit, redacted before it touches the model, audited annually by independent firms.

AES-256 encryption

All data encrypted at rest and in transit. SIDES payloads use RSA-signed envelopes with AES-256-CBC encryption.

TLS 1.3

Every connection to Kreto uses TLS 1.3. No data leaves your browser unencrypted — ever.

PII redaction

SSNs, EINs, and bank identifiers are stripped before any AI processing. Raw PII never touches the LLM.

SOC 2 Type II

Annual audit of security controls, availability, and confidentiality. Pen-tested quarterly by independent firms.

See it on a real notice. 30 days free.

Connect your payroll, upload one notice, watch Kreto cross-reference it. No credit card to start, no commitment after the trial.