VECA — Virtual Executive for Chartered Accountants
AI in CA Profession & MSME

VECA — Virtual Executive for Chartered Accountants

Author : CA Himanshu C Majithiya

Watch on Youtube
 1. WHAT IS VECA?


VECA (Virtual Executive for Chartered Accountants) is a full-stack, AI-powered practice management platform built specifically for CA firms and finance professionals. It automates the end-to-end workflow of a CA office — from client onboarding and compliance tracking to automated document collection, HR management, and AI-assisted data extraction — all within a single, secure, web application.

The platform is built on Django 5 (backend) and React 18 (frontend), secured by JWT authentication with OTP-based registration, and powered by Anthropic Claude and Google Gemini AI APIs for intelligent document processing and task automation.



 2. THE PROBLEM IT SOLVES


CA firms juggle hundreds of compliance deadlines, client documents, staff assignments, and government portal credentials simultaneously. The traditional approach relies on spreadsheets, WhatsApp reminders, and manual follow-ups — leading to missed deadlines, lost documents, and unproductive staff hours. VECA replaces all of this with a unified automated platform.

ProblemHow VECA Solves It
Missed compliance deadlinesAutomated task generation and escalating reminder workflows
Manual document chasingAuto-driven email pipelines with AI-powered data extraction
Scattered client credentialsEncrypted Credential Vault with per-client portal access storage
No staff accountabilityRole-based task assignment, timer tracking, and audit trail
HR managed in spreadsheetsBuilt-in attendance, leave, and payroll modules
No real-time oversightLive dashboard with task analytics, smart alerts, and email logs




 3. CORE MODULES — FOURTEEN MODULES, ONE PLATFORM


  1. Dashboard: Real-time stat cards (total clients, pending tasks, overdue count, today's due), upcoming task table, analytics, and system health monitoring.
  2. Client Management: Full CRUD with bulk Excel import, work-type assignment per client, client portal token generation for self-upload, and client-level document tracking.
  3. Work Types (Task Categories): Configurable compliance categories (e.g., ITR, GST, TDS) with period options, reminder schedules, subtask structures, AI extraction prompts, and auto-driven pipeline configuration.
  4. Task Management: Task creation, assignment, due-date tracking, subtask completion, document attachments, built-in timer (start/pause), task transfer between staff, and completion workflow with document upload.
  5. Auto-Driven Workflow: Fully automated email reminder pipeline: sends reminders to clients, monitors Gmail for replies, uses AI (Claude/Gemini) to extract data from attached documents, generates Excel output, and escalates on non-response.
  6. Document Vault (DMS): Organised document management system with ICAI file-type classification, engagement category groupings, upload, download, and compliance document tracking.
  7. Credential Vault: Encrypted storage of client portal credentials (income tax, GST, MCA, etc.) with reveal-on-demand access control, per-portal-type organisation, and client-linked lookup.
  8. HR Module: Employee profiles, holiday calendar, leave types and balances, leave request → approval → appeal workflow, attendance dashboard, and payroll management.
  9. Google Sync Hub: Multi-account Google integration: sync tasks to Google Tasks, compliance deadlines to Google Calendar, client documents to Google Drive, and Gmail monitoring for incoming client replies.
  10. Reports: Configurable report templates with PDF generation (via ReportLab + Matplotlib), ad-hoc PDF download, scheduled email delivery, and report preview.
  11. Email System: Email template library, multi-sender account management, full email log (sent/failed/pending), delivery analytics, and test-send capability.
  12. Compliance Tracker & PMLA: Compliance status tracking across clients, PMLA (Prevention of Money Laundering Act) module for CA firms, and checklists for engagement management.
  13. Audit Trail: Immutable log of all significant actions within the platform for accountability and regulatory compliance.
  14. Notifications & Alerts: Real-time in-app notification centre, smart alert configuration, webhook delivery for external integrations, and WhatsApp/Telegram bot notifications.



 4. AI-POWERED AUTO-DRIVEN WORKFLOW — THE STAR FEATURE


The Auto-Driven Workflow is VECA's most distinctive capability. It turns every compliance task into a fully automated pipeline that runs without staff intervention:

Pipeline StepWhat Happens
Step 1 — Reminder SentThe system automatically sends a personalised email reminder to the client when a task becomes due, using the configured email template.
Step 2 — Gmail MonitoringVECA's Gmail monitor watches the connected inbox for client replies containing attached documents (e.g., Form 26AS, bank statements, TDS certificates).
Step 3 — AI ExtractionOn receiving a reply with attachments, Anthropic Claude or Google Gemini AI extracts structured data from the document using a configurable extraction prompt.
Step 4 — Excel GenerationExtracted data is automatically populated into a pre-configured Excel template and stored as a task document.
Step 5 — EscalationIf the client does not reply within the configured window, the system sends escalation reminders automatically.
Step 6 — MonitoringThe Auto-Driven Monitoring screen shows real-time pipeline status, execution history, and allows staff to replay any step or manually trigger a send.
Test PipelineA built-in Test Pipeline tool allows staff to simulate each step (init → email → reply check → extraction) without affecting live data.




 5. SECURITY & ACCESS CONTROL


Security FeatureImplementation
JWT AuthenticationAccess and refresh token pair; automatic silent token refresh on expiry.
OTP-Based Registration3-step signup: email OTP → verify → complete profile. Password reset also via OTP.
Role-Based AccessFour roles: Admin, Partner, Manager, Staff — each with granular, per-module permission grants configurable at the staff level.
Session Auto-LockScreen locks automatically after 15 minutes of inactivity; unlocked by password re-entry without full logout.
Multi-Tenant IsolationEvery API request carries an Organisation ID header; data is fully isolated between CA firms.
Encrypted CredentialsClient portal passwords stored with encryption using Python cryptography library.
Audit TrailAll significant actions are logged immutably for accountability and compliance.
DPDP ComplianceUsers can export their personal data or request deletion in compliance with the Digital Personal Data Protection Act.




 6. TECHNOLOGY STACK


LayerTechnologies
FrontendReact 18, Material UI 5 (glassmorphism design), React Router 6, Axios, Recharts, React Big Calendar
BackendDjango 5, Django REST Framework, Simple JWT, PostgreSQL, Celery + Redis (task queue)
AI / LLMAnthropic Claude API (claude-3-series), Google Gemini (google-generativeai)
Google APIsGoogle Tasks, Google Calendar, Google Drive, Gmail (via google-api-python-client + OAuth 2.0)
DocumentReportLab (PDF generation), pdfplumber (PDF extraction), openpyxl + pandas (Excel), Matplotlib (charts)
MessagingWhatsApp Business API, Telegram Bot API
SecurityPython cryptography library, JWT, OTP via email, CORS headers
InfrastructureGunicorn (WSGI), WhiteNoise (static files), environment-based config via python-decouple




 7. KEY DIFFERENTIATORS


  1. End-to-end automation: VECA is not just a task tracker — it actively chases clients, reads their documents with AI, and generates outputs without human intervention.
  2. CA-specific design: Work types, reminder cadences, TDS extraction prompts, GSTR1 processing, PMLA module, and client portal upload links are all purpose-built for CA practice.
  3. Multi-LLM flexibility: The AI provider is configurable — switch between Anthropic Claude and Google Gemini without code changes.
  4. Unified platform: Client management, compliance, HR, documents, credentials, Google sync, reports, and messaging — all in one login.
  5. Granular permissions: Staff access can be restricted to specific modules and actions (e.g., can upload documents but not delete clients).
  6. Real-time monitoring: The Auto-Driven Monitoring dashboard shows every task's pipeline stage, last action, and allows instant intervention.
  7. Client self-service: Client Portal upload links allow clients to submit documents directly without needing a login or account.
  8. Audit-ready: Every action is logged; email delivery is tracked; extraction history is preserved — giving a complete paper trail for any compliance query.



 8. HOW AI IS USED IN VECA


Document Data Extraction

When a client emails a TDS certificate, Form 26AS, GST document, or bank statement, Claude/Gemini reads the attachment and extracts structured fields (deductor name, PAN, amount, period, etc.) based on a configurable extraction prompt.

TDS-Specific Extraction

Pre-built extraction prompts for TDS Form 16, Form 16A, and Form 26AS are included, with support for multi-deductor extraction and discrepancy detection between expected and extracted values.

Excel Auto-Population

Extracted data is mapped to columns in a pre-uploaded Excel template, producing a ready-to-use working file automatically.

Configurable Prompts

Each Work Type can have a custom AI extraction prompt, making the system adaptable to any document type a CA firm receives.

AI Usage Tracking

The platform tracks AI API usage (tokens consumed, cost estimate, success/failure rate) per task and organisation, visible in the AI Usage dashboard.



 9. USER ROLES & PERMISSIONS


RoleAccess Level
AdminFull access to all modules including organisation settings, user management, and all client data.
PartnerSame access level as Admin; intended for firm partners who need full visibility.
ManagerAccess to all operational modules; can approve leaves, assign tasks, and manage staff.
StaffAccess restricted to permitted modules only; permissions are individually configurable per staff member by Admin/Partner.
Platform AdminSuper-admin role for the platform operator; manages all organisations, subscription plans, and platform-level settings.



 10. CLAUDE TOOL USE & MCP-PATTERN BOT INTEGRATION


VECA implements Anthropic Claude's Tool Use API following the Model Context Protocol (MCP) pattern. The backend defines 21 structured tools that expose VECA's full data layer to Claude (and other LLMs). This allows the AI to read from and write to VECA — tasks, clients, attendance, leave, payroll, documents — through natural language conversations on Telegram.

The tool definitions are explicitly designed as MCP-compatible: each tool has a name, description, and typed parameter schema — the same structure an MCP server exposes to Claude. The LLMService class converts these definitions into the provider-specific format for Anthropic (input_schema), OpenAI/Groq (function calling), and Google Gemini (functionDeclarations) — making the bot provider-agnostic.

The 21 MCP-Pattern Tools Exposed to Claude

Tool NameWhat Claude Can Do With It
list_tasksList tasks with filters: status, assignee, client, due date range
get_taskGet full details of a specific task by ID
create_taskCreate a new compliance task with work type, client, assignee, and due date
update_taskUpdate task status, assignee, due date, or remarks
delete_taskDelete a task by ID
assign_taskReassign a task to a different employee
list_clientsList clients with optional search and category filter
get_clientGet full details of a specific client
create_clientCreate a new client with name, email, mobile, PAN, GSTIN, address
list_employeesList employees with search and role filter
get_dashboard_summaryFetch live dashboard statistics (totals, overdue counts)
get_task_reportGet task analytics grouped by status, category, assignee, or client
get_attendance_statusGet the authenticated user's attendance status for today
start_dayClock in — start the work day
end_dayClock out — end the work day
apply_leaveApply for leave with type, dates, and reason
get_leave_balanceGet the user's current leave balances across all leave types
list_compliance_filingsList compliance filings with optional status and client filters
get_my_payslipsRetrieve payslips for a given month and year
search_documentsSearch the Document Vault by keyword
list_task_categoriesList all configured work types / task categories


How the Bot Conversation Works

StepDescription
User sends messageStaff member sends a natural language message on WhatsApp or Telegram (e.g., "Show me all overdue tasks for client Sharma & Co")
OTP AuthenticationOn first use, the bot authenticates the user via a 6-digit OTP sent to their registered email. A JWT token is issued for subsequent API calls.
LLM Processes MessageThe message (plus up to 20 turns of conversation history) is sent to Claude/Gemini with all 21 tool definitions.
Tool Call ExecutedClaude decides which tool to call (e.g., list_tasks with client filter). The backend executes the tool against VECA's database using the user's JWT.
Response Sent BackThe tool result is returned to Claude, which formats a concise, WhatsApp/Telegram-friendly reply with bullet points and ₹ formatting.
Multi-Provider SupportThe bot works with Anthropic Claude, OpenAI GPT, Google Gemini, and Groq — switchable from the Platform Admin settings without any code change.


The AI assistant system prompt instructs Claude to act as "VACA AI Assistant" — a CA practice management assistant that is concise, uses bullet points, formats amounts in Indian Rupees, and clarifies ambiguous requests before taking action.


 11. IMPACT & BENEFITS FOR CA FIRMS


VECA delivers measurable operational improvements for CA practices:

  1. Zero missed deadlines: Automated task generation and escalating reminders ensure no compliance due date is overlooked.
  2. Reduced manual follow-up: The auto-driven pipeline eliminates the need for staff to manually chase clients for documents.
  3. Faster data entry: AI extracts and populates data from client-submitted documents directly into Excel, replacing hours of manual typing.
  4. One login, everything: Staff no longer switch between spreadsheets, email, WhatsApp, and multiple tools — everything is in VECA.
  5. Transparent accountability: Every task has an owner, a timer, a due date, and an audit log — managers can see exactly what is happening.
  6. Client self-service: Clients submit documents via a secure portal link — no accounts, no app installs required for them.
  7. Compliance confidence: Compliance Tracker, PMLA module, Audit Trail, and Checklists give firms the documentation needed for peer reviews and regulatory queries.
  8. Scalable practice: Multi-tenant architecture means one deployment serves multiple firm sizes; the platform scales with the practice.