The audit trail that keeps 30 sites honest against the invoice.

Context

A digital agency running roughly thirty managed WordPress sites had the oldest problem in services work: no reliable link between what was actually done on each site and what was billed for it. Over-billing, under-billing, and quiet scope creep all hid in that gap.

What we built

We built an agency-grade audit trail. A custom WordPress plugin (HMAC-signed transport, an outbox for reliability) reports every revision and activity event from each managed site; the platform pulls tracked time from the time-tracking system and reconciles the two, activity versus billed hours, to flag over-billing, under-billing, and scope creep. FastAPI and Postgres do the reconciliation, a scheduler keeps it current, Metabase dashboards surface it, and secrets are encrypted at rest, production-deployed across the full ~30-site fleet.

The value

• Closes the gap between work done and hours billed across thirty sites. Billing integrity becomes measurable instead of assumed.
• Catches scope creep and under-billing early, protecting margin and the client relationship at the same time.
• A custom WordPress agent reports real activity from every site, so the audit trail is ground truth, not memory.
• Billing integrity runs as a continuous, monitored system rather than a quarterly spot-check.