KSIDol documentation > KSIDol modules > ComptaPortal

Module guide: ComptaPortal

Non-technical user guide: what the module is for, how to use it, and how it works with Dolibarr.

Target audienceChartered accountants and firms

Documents exposedValidated customer and supplier invoices

Access securityNamed account + OTP code by e-mail

Retrieval channelsPortal, download, ZIP by e-mail, API

1. Module overview

ComptaPortal is a secure extranet that adds to Dolibarr to let your accountant (or their firm) retrieve your accounting documents independently, without giving them access to your management software. The company invites the accountant by name and chooses precisely what they can see; the accountant then logs in to a dedicated portal to view, download, export or receive invoices by e-mail — or retrieve them automatically from their own accounting software through an interface (API). The module relies entirely on Dolibarr's native data (third parties, customer and supplier invoices, PDF documents already generated): there is nothing to re-enter. It simply exposes validated invoices, in read-only mode and with full traceability. It does not replace an approved electronic invoicing platform.

A dedicated access for the accountant, with no Dolibarr account and no access to your internal system.
Rights set on a case-by-case basis: sales, purchases, download, e-mail sending, API.
Enhanced security: named account, strong password, one-time code (OTP) by e-mail, audit log.
Four ways to retrieve documents: online viewing, download, ZIP archive received by e-mail, or automatic retrieval via API.
Support for both standard invoices and Factur-X invoices (PDF with embedded XML).
A module integrated into the Accounting menu, multi-company compatible and GDPR-compliant.

2. Dashboard and management (company side)

In Dolibarr, the company manages the portal from the Accounting > ComptaPortal menu. The home page provides an at-a-glance overview.

Three immediate indicators: number of active accountant accounts, pending invitations, transmissions over the last 30 days.
A button to create a new invitation.
A button to open the public portal in a new tab and see what the accountant will see.
A clear reminder: the portal gives controlled access to documents without opening the Dolibarr interface, and does not replace an approved electronic invoicing platform.

3. Inviting your chartered accountant

It all starts with a named invitation. The company decides who accesses the portal and what they can access.

Create an invitation by entering the accountant's e-mail, firm, first name, last name and display language.
Tick precisely the rights granted: customer invoices, supplier invoices, download, e-mail sending, API access.
Send the invitation by e-mail ("Create my account" button) or copy the secure link to send yourself.
Add recipients in copy (CC) and, if needed, request a read receipt.
Track the status of each invitation: pending, used or expired (configurable validity period).
Delete an invitation that is no longer needed.

4. Managing access accounts

Once an accountant has created their account from the invitation, the company keeps control over that access.

List of existing accounts: name, firm, language, granted rights, last login date and status.
Enable or disable access at any time, without deleting it.
Permanently delete access when the collaboration ends (the associated login codes are also purged).

5. Tracking transmissions

Every document delivered to the accountant is logged, regardless of the channel used.

Detailed history: date, recipient account, origin (customer or supplier), document identifier, channel (download, e-mail or API), file name, export batch and status.
Lets you know exactly who retrieved which document and when.
Screen reserved for users with the audit read right.

6. Security log (audit)

A Log / Audit tab records all sensitive portal events, in a compliance-oriented approach.

Log of logins, OTP codes, downloads, API calls, token creations and revocations, and blocks.
Four summary indicators: total events, failures and blocks, accounts concerned, last event.
Filters by event type and by result (success, failure, block).
IP addresses and browsers stored in hashed form (non-reversible) to comply with GDPR.

7. The portal as seen by the chartered accountant

On their side, the accountant has a simple and secure portal, entirely separate from Dolibarr.

Account creation from the invitation link: the accountant chooses their own password (at least 12 characters) then receives a confirmation e-mail.
Login by e-mail and password, reinforced by a one-time code (OTP) sent by e-mail at each login (option the company can enable or not).
Home dashboard with clickable tiles: recent documents, customer invoices, supplier invoices, documents not yet transmitted.
The accountant never sees inside Dolibarr: only the documents the company has authorised them to view.

8. Searching, downloading and exporting documents

The heart of the portal: finding the right invoices and retrieving them in the expected format.

Filtered search: period (start and end dates), sales or purchases, type (invoice, credit note, down payment, progress billing), third party, transmission status (never transmitted / already transmitted).
Table of invoices with reference, third party, pre-tax, VAT and total amounts, file format (PDF or Factur-X) and last transmission date.
Download a single invoice.
Select several documents and export as a ZIP archive, accompanied by a summary manifest and a readme file.
Receive the archive by e-mail — for security, always to the address of the logged-in account, never to a freely entered address.
Only validated invoices that already have their PDF are offered; the others appear as "Awaiting validation" and cannot be downloaded.

9. Automatic retrieval via API (accounting software)

For firms equipped with accounting software, invoices can be retrieved without manually logging in to the portal.

The accountant creates one or more access tokens (name, validity period) and can revoke them at any time.
The token is entered in the accounting software: it replaces a password and is sent in the authentication header of each call.
Two operations available: list invoices (with amounts, format and download link) and download a document.
Read-only access, limited to a number of calls per hour and fully logged.
The integration documentation (base URL and call examples) is displayed directly in the portal.

10. Module configuration

A single configuration page lets you adapt the portal to your organisation. Most values are pre-filled intelligently.

Enable or disable the public portal, set its address (URL) and displayed title.
Choose the portal's default language (French, English, German, Spanish, Italian).
Set the validity period of invitations and the inactivity time before automatic logout.
Enable the OTP code by e-mail and set its validity period.
Set export limits (maximum number of documents and maximum size in MB) and the API call cap per hour.
Define the sending e-mail address (pre-filled with that of the company).
Customise the message of the e-mail sent to the accountant via a rich text editor; the KSIDol.io signature is added automatically.

11. Links with Dolibarr

The module does not work in isolation: it integrates with the native building blocks of Dolibarr.

Third parties (customers and suppliers) : The invoices offered are linked to Dolibarr third parties; the accountant can filter by third party, and your company's legal details (SIREN, SIRET, VAT, address) are displayed once logged in.
Customer invoices : Validated sales invoices (invoices, credit notes, down payments, progress billings) are exposed in read-only mode with their pre-tax, VAT and total amounts.
Supplier invoices : Validated purchase invoices are exposed in the same way, only if the corresponding right has been granted to the accountant.
PDF and Factur-X documents : The module distributes the PDF already generated by Dolibarr for each invoice and automatically detects Factur-X / ZUGFeRD variants (embedded XML) to provide them as a priority.
Dolibarr e-mail engine : Invitations, confirmation e-mails, OTP codes and archive sends use Dolibarr's native e-mail system and the company's sending address.
Triggers on invoices : The module listens to the life-cycle events of customer and supplier invoices (validation, modification, cancellation, deletion) to feed its traceability log.
Accounting menu and user rights : The module installs in Dolibarr's Accounting menu; each screen is protected by a dedicated right (viewing, access management, audit, configuration).
Multi-company (entities) : All data is partitioned by entity: on a multi-company installation, each company sees only its own invoices and accounts.