Tripbooks design system / lab 26 / settings, whole One pageThe sweepThe screenDecide

lab 26 / commissioned, from scratch

One settings page, and nothing left outside it.

The commission: forget the settings page, the profile and the user menu as they stand, sweep the platform for every setting that exists anywhere, and put all of it on one page. No groups. Tabs, and their pages.

Twenty-two tabs, flat. The profile is the first of them, because a person’s own settings are still settings; what keeps the merge honest is the third column, which on that tab reads You all the way down. The rule that decides what belongs there is unchanged: if changing it changes what another person sees, it is not yours.

Every row keeps the Lab 11 grammar: what it is, what it is set to, and who may change it. A locked row says why. A row that cannot exist yet is drawn dashed and says what it is waiting for. And one rule this lab adds after what the sweep found: a control that saves nothing is not drawn at all.

01 / what the sweep found

Eleven things in two homes, and forty switches wired to nothing.

The full sweep of the platform found the same value written from two sections, personal controls filed under the company’s page, two rival notification taxonomies, and dozens of drawn controls that persist nowhere. The split rule that resolves every duplicate: a rule belongs to a company tab, a preference belongs to Profile, and nothing is both.

Found in the sweepWhere it lives todayIts one home now
FX cadencetwo sections, one keyMoney and tax and Currency & FX both write the same stored cadence with different controls. One row on Money and tax; the Currency & FX section is dissolved into it.
Base currencyasked twiceLocked truth on Money and tax, and a second combobox on Currency & FX that saved to nowhere. The locked row is the only answer.
Themeuser menu + displayPersonal theme goes to Profile. The workspace accent and logo were filed under “Theme & Display” despite applying to everyone; they are company brand and move to Brand.
Securitypersonal, on the company pageToday’s Security section is entirely personal (password, passkeys, sessions) yet sits behind “Company settings · Admin”. Yours moves to Profile; Security keeps only account policy.
Notificationstwo taxonomies, dead switchesTen settings-page switches wired to nothing beside a real ten-class matrix in the Notification Center. The matrix moves to Profile as yours; company routing rules stay on Notifications.
Exporta live door + a dead menuThe register export menu is dead code beside the settings export door. One door on Data and privacy; the dead component is removed.
Credit releasecontrols + approvals queueThe rule appears inside Bookings controls and again behind the approvals queue. The named signers live on Approvals; Bookings states the gate and points there.
Role and reachthree surfacesGranted in Team dialogs, read on the profile head, switched in the entity switcher. Stated read-only on Profile and Users; changed in exactly one place, Roles and permissions.
Also swept in

Settings that lived outside the page entirely, now homed: the world clock cities (Profile), saved register views (Profile, read-only, managed on each register), the notification matrix (Profile), tag groups (Users), agency accreditations (Brand), the enquiry priority clock (Enquiries), rate comparison sources (Quotations), the hardcoded check-in rules (Time and hours), the accounting dual controls and legal holds (Accounting, Data and privacy), and the module rules that sat under eight “Controls” sub-tabs, which become the six module tabs: Customers, Enquiries, Quotations, Bookings, Service, Accounting.

02 / the screen

Twenty-two tabs. Click through all of them.

The rail is flat: you first, then the company from its foundations outward, entities to sample data. Every tab below is drawn in full and the rail is live.

· SettingsFT

Settings

Northline Travel LLC · United States · books in USD Search settings
Profile Entities and branches Money and tax Documents Brand Users Roles and permissions Approvals Customers Enquiries Quotations Bookings Service Accounting Time and hours Notifications Integrations TAI Data and privacy Security Add-ons Sample data

Who you are

every row on this tab is yours · U1
PhotographReplaces your initials everywhere your avatar is drawn
FTReplaceRemove
You
NameWhat colleagues and customers see on your work
Fadi Tayyoun
You
EmailSign-in owns this address
fadi@northline.com
Sign-in
PhoneCountry code and number, rendered formatted
+1 212 555 0184
You
Role and reachStated here, changed only on Roles and permissions
Admin · all three entities
Roles tab

How you appear

Display titleShown on customer-facing share pages instead of the role
Travel director
You
Sign-offArrives with the message composer
Not yet · no composed messages
You

Display

ThemeThe whole platform, this device
SystemLightDark
You
Date formatRe-renders every date you see; customer documents keep the entity format
22 Jul 2026Jul 22, 20262026-07-22
You
Time formatClocks and stamps
24-hour12-hour
You
Time zoneShifts every stamp you read, changes no stored value
New York · America/New_York
You
World clockThe cities on your rail, up to seven
Dubai, London, RiyadhManage
You
First day of weekYour calendars and boards
MondaySunday
You
Opens onWhere sign-in lands you
Dashboard · CRM
You
Saved viewsYour register views, managed on each register
6 private · 2 shared
You

Accessibility

Text sizeThe page scales, measured
SmallNormalLargeLarger
You
Reduce motionTransitions actually stop
SystemOnOff
You
Increase contrastMuted ink measurably darkens
SystemOnOff
You
Underline linksEverywhere
You

Your notifications

what reaches you, by class and channel · routing rules live on the notifications tab
ClassBellEmail
Reminders
Approvals
Service
Fulfilment
Money
The outside world
System
People
Customers
Policy clocks
Inbox readingWhose items your notification inbox shows
MineEveryone
You

Away and cover

AwayHands your rail to your cover for the dates below
You
From and untilReal dates, validated as a range
Not away
You
Covered bySight and action for the range, never ownership · own entity only
Choose a colleague
You · own entity

Sign-in

PasswordChanged through sign-in, never stored here
Change password
You
Two-step verificationAuthenticator app
on since Mar 2026
You
PasskeysThis Mac signs in with Touch ID
MacBook Pro · Touch IDAdd
You
Recovery codesFor the day the phone is gone
10 of 10 remainingView
You
Connected accountsSign in with
Google Workspace · connectedDisconnect
You
Your sessionsThis Mac · Safari on iPhone · Chrome on the office desk
3 devicesSign out others
You

The entities

each keeps its own books, numbering and tax
Northline Travel LLCHeadquarters · United States
USD booksHQManage
Admin
Northline Travel UK LtdUnited Kingdom
GBP booksManage
Admin
Northline Voyages SASFrance
EUR booksManage
Admin
Add an entityLegal name, seat, licence; the country picks the base currency and then it locks
Add entityAdd branch
Admin

Reach

Default entity for new recordsWhere your new work books unless you choose
Northline Travel LLC
Admin
Branch veilA branch never sees another branch unless granted on Roles
always on
Not changeable

Money and tax

Northline Travel LLC only · other entities set their own
Base currencyThe books are kept in this and it cannot change once a journal exists
USD · United States dollar
Locked · journals exist
Presentation currencyUsed by Consolidated Reporting only
USD
Admin
Billing currenciesCustomers may be billed in any of these
USD, EUR, GBP, AED
Finance
Commercial FX sourceOne source, one cadence, stated once
Open Exchange Rates15mHourlyDailyManual
Admin
Manual ratesHold a rate by hand; held rates say so on every figure they touch
None heldHold a rate
Finance
Stable coin ratesUSDT and USDC read-only reference rows
Finance
Statutory FX sourceRates used for the ledger and the tax return
Not set for the United States
Admin · blocks close
Rate proof on share pagesDecision support beside a converted figure, never a price claim
Finance
Tax regimeDecides the tax fields on every document
United States · sales tax by state
Admin
Period lockNothing can post on or before this date
31 Jul 2026
Finance
Margin floorItems sold below this route to an approver
8.0%
Finance
Rate stampingEvery cross currency movement keeps the rate it used, forever
always on
Not changeable

Numbering

PREFIX-YEAR-N · per entity · gapless · the next number is derived, never typed
InvoicesNorthline Travel LLC series
INV-2026-114 issuednext INV-2026-115
Locked · in use
Credit notes
CRN-2026-9 issuednext CRN-2026-10
Locked · in use
Quotations
QTN-2026-231 issuednext QTN-2026-232
Locked · in use
Receipts
RCT-2026-402 issuednext RCT-2026-403
Locked · in use

Documents sent to customers

Document languageEvery customer-facing document
English
Admin
Default payment termsNew customers start here; each customer can differ
Net 14
Finance
Invoice layoutThe entity letterhead and footer
Preview
Admin
Quotation share pageWhat a customer opens from the link
Preview
Admin
Footer textRegistration line required by the seat country
Northline Travel LLC · registered in Delaware
Admin

What customers see

brand is company-wide and customer-facing, never a personal theme
LogoShare pages, documents and email
northline.svgReplace
Admin
Brand nameShown to customers instead of the legal name
Northline Travel
Admin
Workspace accentThe one accent colour, for everyone; personal theme stays on Profile
IndigoChoose
Admin
Email senderThe from line on outgoing documents
Northline Travel <docs@northline.example>
Admin
Share page addressWhere quotation and voucher links live
go.northline.example
Admin

Accreditations

shown on customer-facing pages
The agency holdsAdded one at a time, each with its number
IATA · 24-3 0114 2ATOL · T7 5521Add
Admin

The roster

role and reach are changed on the roles tab, per person · U2
Fadi Tayyounfadi@northline.com
Adminall entities
Roles tab
Huda Azizhuda@northline.com
FinanceLLC + UK
Roles tab
Sarah Mansoursarah@northline.com
SupervisorLLC
Roles tab
Omar Khalilomar@northline.com
AgentLLC
Roles tab
Lea Fontainelea@northline.example
AgentSAS
Roles tab
Quality reviewquality@northline.com · read only
Qualityall entities
Roles tab

Seats

Invite a userArrives with the Agent role and no reach until granted
Invite
Admin
Seats in use5 included on the plan, extras billed monthly
6 of 5 + 1 extra
Add-ons tab

Tag groups

who @mentions reach
@allEveryone, minus the excluded
Excludes: Quality reviewEdit
Admin
@financeCustom group
Huda Aziz, Fadi TayyounEdit
Admin
New groupA name and its members
Create group
Admin

Capabilities by role

solid may · hatched may, with a second signature · empty may not
CapabilityAdminFinanceSupervisorAgentQuality
Create a quotationquotation.create
Clear an undercut marginquotation.approve
Issue an itembooking.issue
Issue on the marketplacemarketplace.issue
Release credit against the gatebooking.release
Open a passport copycustomer.passport
Read a private customercustomer.blacklist
Archive a customercustomer.archive
Post a manual journalledger.manual
Close a periodledger.close
Export a registerreports.export

Per person

Role and entity reachChanged here and nowhere else; every change is stamped and ends that person’s sessions
Open a user
Admin
Custom rolesA name and a set of capabilities
None yetNew role
Admin

Who signs what

each rule names people, not the word manager
Margin under the floorA quotation item selling below 8.0%
Huda Aziz
Admin
Release against the gateIssuing beyond what is paid
Fadi Tayyoun + Huda Azizdual
Admin
Duplicate customer overrideCreating a customer the platform believes exists
Any Admin
Admin
Identity reviewBlacklist near-matches wait here for a decision
Sarah MansourOpen the queue
Admin
Refund or write-off above $500Service resolutions with money attached
Sarah Mansour
Admin
Manual journalAny hand-posted entry
Second Finance signature
Finance
Archive a customerWith open balance or future travel
Admin only
Admin

Customer rules

Archive, never deleteA customer record can end, but it cannot vanish
always on
Not changeable
Duplicate checkCreating a likely duplicate needs the approval named on Approvals
Admin
Blacklist match flagsNear-matches are flagged and routed to identity review
always on
Not changeable
Passport vaultCopies are masked; opening one is a stamped capability
always on
Roles tab
Consent before marketingNo message without a recorded consent
always on
Not changeable
Private customersVisible to the owning desk only; reading one is a capability
Governed on Roles
Roles tab

The response clock

business hours, from the time and hours tab
High priorityRespond within
1 day
Admin
Medium priorityRespond within
3 days
Admin
Low priorityEverything slower than medium
Derived
Admin

Behaviour

Idle enquiry proposalsTAI may propose a next step on enquiries going quiet
Admin
Spam is lostMarked spam leaves the funnel and the counts
always on
Not changeable

Quotation rules

Default validityNew quotations expire after
14 days
Admin
Search-first itemsItems are found in the library or live supply, never typed
always on
Not changeable
Acceptance by secure linkThe customer accepts on the share page, tokened
Admin
Electronic signatureDropbox Sign on acceptance documents
Admin

Rate comparison

decision support, never a price claim
Hotel sourcesUp to three
Google HotelsBooking.comExpedia
Admin
Flight sourcesUp to three
Google FlightsKayak
Admin
On customer quotationsShow the comparison beside your price
Admin

The gate

Issuance gateNothing issues beyond what is paid, releases excepted
always on
Not changeable
Per-item issuanceItems issue one at a time; there is no bulk issue
always on
Not changeable
Release approversThe dual signature is named on Approvals
Named on Approvals
Approvals tab

Fulfilment watch

Departure risk windowUnissued items flag when departure is within
7 days
Admin
Hold expiry warningHeld fares warn before they lapse
3 days
Admin
Policy deadlinesCancellation deadlines are watched and surfaced
always on
Not changeable
Cancellation policy on confirmationThe policy rides along on every confirmation
Admin

The service clock

measured in business hours from the time and hours tab
First responseAny new service ticket
4 business hours
Admin
Resolution · urgentTraveler currently on a trip
24 hours
Admin
Resolution · standardEverything else
72 business hours
Admin
EscalationUnanswered tickets move to the supervisor
after 8 business hours
Admin
Write-off against goodwillHow service money is told apart in the ledger
Separate ledgersOne ledger
Finance

Dual controls

per entity · Northline Travel LLC shown
TAI delegation limitTAI may prepare, never post, above this it may not even prepare
$1,000
Finance
Credit note dual controlA second signature above
$2,500
Finance
Three-way match toleranceBill, order and receipt may differ by
$25 or 1%
Finance
Payment run second approvalRuns above this need two
$10,000
Finance
Bank-detail change cool-offA changed supplier account cannot be paid for
48 hours
Finance
Supplier penalty on cancellationWho absorbs it by default
Charged to the customerAbsorbed
Finance

The entity clock

Northline Travel LLC · every stamp keeps entity time and UTC
Entity time zoneThe default clock for this entity
New York · America/New_York
Admin
Business hoursDrives the response clocks and reminder timing
Mon to Fri · 09:00 to 18:00
Admin
SaturdayReduced desk
10:00 to 14:00
Admin
Week starts onBoards and calendars for the whole entity
MondaySunday
Admin

Travel day rules

Hotel check-inA room counts from
15:00
Admin
Hotel check-outA room counts until
12:00
Admin
Overnight arrivalA flight landing before this belongs to the night before
08:00
Admin
Audit stampsEntity time plus UTC on every record, forever
always on
Not changeable

Routing rules

who an event reaches · each person throttles their own on the profile tab
New enquiryReaches the assigned desk the moment it lands
Assigned desk
Admin
Gate at the lineA booking that cannot issue further
Owner + Finance
Admin
Quotation expiringAnchored 72 hours before expiry, not a fixed date
Owner
Admin
Invoice past termsWeekly digest, Monday 09:00 entity time
Finance
Admin
Passport expiringAnchored 90 days out for travelers with future trips
Owner
Admin
Departure tomorrowEvery booking travelling within 24 hours
Owner + assigned desk
Admin

Connected

keys are held, never displayed
Dropbox SignDual-signed releases and acceptance documents
ConnectedManage
Admin
Google MapsPlaces and the locator maps
Key set · IP restrictedRotate key
Admin
Open Exchange RatesThe commercial FX source
Connected · hourly
Admin
StripeSubscription billing
ConnectedManage
Owner
Email deliveryDocuments and notifications
ConnectedSend a test
Admin
Supplier connectionsManaged per supplier in their own records
10 live
Supplier records
AnthropicSub-processor behind TAI · disclosure on the TAI tab
Connected
Admin

The agent

TAI answers from your tenant and nothing else
TAIAvailable to every user of this account
Admin
Answers useYour own tenant data only
This tenant only
Not changeable
Customer-facing disclosureThe AI line on every customer surface TAI touches
required
Not changeable

What TAI may do

Profile briefingsA briefing on any record, on request
Admin
Booking-critical checksWatches gates, holds and deadlines and says so
Admin
Document watchingReads incoming documents and files them
Admin
Suggested actionsTAI may propose the next step; a person always executes it
Admin
Ledger delegationThe amount limit lives on Accounting
$1,000 · set on Accounting
Accounting tab
Sub-processingAnthropic processes prompts as a sub-processor under the DPA
Read the disclosure
Admin

The export door

the only export control on the platform · X2
Export a registerCarries your own visibility: a masked row exports masked, a veiled branch exports nothing
Choose a registerExcelCSVXML
Admin
Everything held on one personThe data-request shape, delivered as an archive
Request
Admin
ImportsNothing imports · X1
There is no import
Not changeable

Retention

Archive, never deleteRecords end, they do not vanish; rate stamps are kept forever
always on
Not changeable
Retention scheduleWhat the seat country requires, per record class
View the schedule
Finance
Legal holdA reference and a reason freeze a record beyond every rule
No active holdsPlace a hold
Admin

The export log

newest first · every export lands here
WhenWhoWhatRowsFormat
22 Jul 2026 · 14:08Huda AzizInvoices · LLC1,204Excel
18 Jul 2026 · 09:41Fadi TayyounCustomers226CSV
02 Jul 2026 · 16:22Quality reviewBookings · Q2388CSV

Account policy

what is required of everyone · your own devices live on Profile
Two-step verificationRequired for Admin and Finance
required for 2 roles
Admin
Session lengthIdle sessions end after this
12 hours
Admin
Password rulesMinimum length, checked at change
12 characters
Admin
On role changeEvery session of that person ends at once
always on
Not changeable
Sign-in alertsA new device notifies the account owner
Admin

The plan

PlanAgency · 5 users included
AgencyCompare plans
Owner
Extra seatsBeyond the included five
1 × $15 / month
Owner
Workstation ToolsThe first paid add-on
$15 / month
Owner
Payment methodThe card the subscription charges
Visa · 6411Update
Owner
Billing emailWhere the subscription invoice goes
fadi@northline.com
Owner
Subscription invoicesEvery charge to date
View invoices
Owner

The demonstration set

this tab stays reachable at all times
Sample dataThe demonstration tenant your account started with
Present · marked on every record
Admin
Remove sample dataDeletes every demonstration record; your own work is untouched. This is the only exit from the demo tenant and it cannot be undone.
Remove sample data
Admin
Why the entity line stays in the header

Settings answer for one entity at a time. The header names which one, and switching entity re-answers every company tab while Profile, which belongs to the person and not the entity, stays exactly as it was. That is the merge holding under the hardest case rather than breaking on it.

What I need from you

Four, and this surface is settled.

  1. The twenty-two tabs and their order. Flat, as commissioned; you first. The eight Controls sub-tabs became the six module tabs, one each for Customers, Enquiries, Quotations, Bookings, Service and Accounting, because their rules belong to their modules, not to a drawer called Controls. If any tab is missing, misnamed or should not exist, this drawing is where it costs nothing.
  2. The eight dedup rulings from the sweep. Rule to the company tab, preference to Profile. Each is listed with its one home; any can be re-homed by pointing at the row.
  3. The no-dead-doors rule for controls. The sweep found some forty switches that save nothing, which is exactly what killed the first profile. The rule this lab proposes: a control ships wired or it is not drawn, and a fact that is merely stated is drawn as a locked value, never as a switch.
  4. One extension to the drawing vocabulary. The choose-one control (theme, date format, cadence) is drawn as a small segmented row built from existing tokens, because a row of inputs cannot say chosen. It appears fourteen times here. If you would rather a dropdown, every use swaps at once.