Problem
Tekruiter is a multi-tenant recruitment and staffing platform unifying ATS pipelines, candidate submissions, client timesheets, placement contracts, and automated billing. In a multi-tenant staffing environment, data leakage across agency boundaries or miscalculated margin math creates immediate commercial and legal exposure.
The platform required extensive lead QA to validate tenant isolation, Org-Wide Default privacy, and financial calculations prior to general release.
Context
Lead QA engagement testing across 20+ modules in a multi-tenant recruitment SaaS environment, leading testing alongside a second tester.
My Role
Lead QA: designed test matrices across 6 personas, performed API traffic inspection, audited Org-Wide Default privacy rules, validated complex billing formulas, and led defect triage and retesting.
Architecture & Coverage Scope
Testing encompassed 6 user personas (Recruiter, Account Manager, Candidate, System Admin, Finance/Billing, and External Agency) across 20+ modules:
- •Org-Wide Defaults & Privacy: Candidate rosters, client placement lists, bill rates, pay rates, and agency margin data
- •Candidate & ATS Portal: Job applications, resume profiles, interview stages, and agency job visibility
- •Timesheets & Placements: Placement start dates, hour submissions, approval workflows, and status synchronization
- •Invoicing & Billing Engine: Rate multipliers, billable hour aggregation, invoice draft creation, and ledger saves
Reliability & Key Findings
Testing identified 60+ defects across 20+ modules (57 logged in the export sheet, with 47 uncovered by the lead tester and 10 by the second tester). Layer analysis classified 31 defects as frontend-only, 13 backend-only, and 13 spanning both layers.
Critical findings uncovered during testing included:
- •Org-Wide Default privacy failures: Candidate and placement lists leaked confidential pay rates, bill rates, and margin data to unauthorized internal roles and cross-tenant users.
- •Cross-agency portal leakage: Jobs submitted by external agencies were inadvertently surfaced to candidates registered under unrelated agencies.
- •.95M billable calculation error: The billing calculation engine multiplied annual bill rates directly by hourly timesheet entries, inflating client invoices into an erroneous .95M billable total.
- •Pre-start date timesheet logging: Candidates and recruiters were able to log and approve billable hours prior to official placement start dates, distorting payroll accounting.
- •Invoice generation failures: Missing auto-draft invoice mechanisms and a database integrity constraint failure blocked manual invoice generation and corrupted workflow saves.
Results & Impact
- •60+ defects documented with step-by-step reproduction evidence across 20+ modules and 6 personas
- •Prevented multi-million dollar billing errors and confidential pay rate exposure across agency boundaries
- •Resolved database integrity exceptions blocking timesheet and invoice workflow persistence