SUI
Unemployment Insurance
SUI rate verification, voluntary contribution analysis, separation responses via SIDES, charge protests, benefit-charge audits.
- rate verification
- SIDES e-response
- voluntary contribution
§ the product
The compliance OS for CPA firms.
Register clients across all 50 states, then put every notice to work: Kreto cross-references it against payroll, quantifies the discrepancy in dollars, and drafts the protest letter for signature — with a hash-chained audit log behind every action. Built for firms that audit themselves before the state does.
SOC 2 Type II · audit in progress7 compliance categories · all 50 statesHash-chained audit log · verified daily
§ the workflow
Every notice answered, every dollar on the record.
Compliance platforms stop when you're registered. Kreto keeps going when the notice arrives — reading it, quantifying the gap against payroll in dollars, and answering it — with every step signed into one audit pack you never have to reconstruct.
01 · Docketed
Every deadline on the clock, the day it lands.
Forward, email, or upload a notice from any state and it comes back parsed — claimant, employer, separation date, deadline — and docketed the moment it arrives, with the response window already counting down. Nothing waits to be noticed.
/notices · today
09:14Reyes, M. · CA EDD4d
09:48Patel, A. · NY DOL7d
11:02Cho, J. · TX TWC14d
14:23Brown, T. · WA ESD10d
02 · Quantified
The gap against your payroll, in dollars.
Kreto pulls the matching pay-period facts from your payroll provider — Finch, Paychex, Intuit, Gusto, Rippling — applies the state's separation rules, and surfaces every discrepancy as a line-level dollar delta you can cite.
/notices/N-2026-0418-3104/xref
09:31Facts pulled · Finchb3d7
09:34Δ flagged · §1256c1e9
11:02Sudheer M. · 2 editsd4a1
11:04Approved · partner sign-offready
03 · Answered
Filed direct, with a receipt that holds up.
The response goes out — SIDES E-Response (in NASWA certification), portal-assisted submit elsewhere — and the confirmation is captured, hashed, and appended to the tamper-evident audit chain beside every prior step. Proof on demand, never reconstruction.
/audit · N-2026-0418-3104
14:48Filed · SIDES CAe7b2
14:48Confirmation capturedf1d3
14:48Appended to audit chainac84
·Tamper-evident · verified dailychained
§ what we cover
Seven categories. Every state.
Kreto handles the entire employer-compliance perimeter — from unemployment insurance and payroll tax to ACA penalty letters and ICE I-9 audits. Each category has its own state-specific rules engine and document templates.
IRS
Payroll Tax
IRS notices (CP2000, 941, 940), state withholding mismatches, FUTA reconciliation, deposit-schedule penalties, abatement requests.
- CP2000
- 941 / FUTA
- abatement letters
WC
Workers Compensation
Class-code audits, premium reconciliation, e-mod tracking, audit-dispute letters, NCCI / state-rating-bureau correspondence.
- class-code audit
- e-mod tracking
- audit dispute
PFML
Paid Family Leave / SDI
State PFML / TDI / SDI contributions, eligibility verifications, voluntary-plan filings, employer rate notices, claim denials.
- contribution audits
- voluntary plans
- claim denials
DOL
Wage & Hour
DOL audits, overtime reclassifications, FLSA exemption disputes, state minimum-wage compliance, wage-theft claims.
- DOL audits
- FLSA exemptions
- minimum-wage drift
I-9
Employment Verification / I-9
I-9 audits, E-Verify discrepancies, ICE NOI responses, document-retention compliance, retroactive I-9 corrections.
- I-9 audits
- E-Verify
- ICE NOI
ACA
ACA / Benefits
Letter 226-J penalty assessments, 1094-C / 1095-C corrections, affordability-safe-harbor disputes, full-time-equivalent audits.
- Letter 226-J
- 1095-C corrections
- FTE audits
§ the engine
The agency's number, against your payroll.
Most claim-response software stops at “here's a draft letter.” Kreto's cross-reference engine reads the notice, pulls the matching pay-period facts from your payroll provider, and surfaces every line-level discrepancy with a citation.
step 1
Classify the notice
OCR + LLM extract claimant, employer, agency, jurisdiction, period, action required, deadline. PII redacted before any model call. Confidence score on every field.
step 2
Pull the matching facts
The engine queries your payroll provider for the exact pay periods the notice references — gross wages, separation date, employment dates, contributions — and hashes the source row.
step 3
Compute the delta
State-specific rules (e.g. CA UI §1256, NY UI base period) run against the agency's number vs. your payroll's number. The output is a line-by-line discrepancy with citations.
/notices/N-2026-0418-3104/xref · sample
agency_amount→$8,420.00
payroll_amount→$7,180.00
delta=−$1,240.00 · §1256
sample data · not a real notice
§ the audit trail
Every action signed. Every record verifiable.
When a state wants to know what happened, you don't reconstruct from email and screenshots. You export the record. Every notice action — receipt, edit, sign-off, filing — is written to a SHA-256 hash-chained audit log that is tamper-evident and re-verified daily.
For a CPA firm, the audit trail isthe work. The interface is just how it's assembled.
- SHA-256Per-action hash chain — receipt → draft → review → file. No silent edits.
- CHAINEDTamper-evident — every record carries the hash of the one before it. Edits can't hide.
- DAILYChain verified — an automated integrity check re-walks the full chain and flags any break.
- EXPORTDownload any time — the full audit trail, exportable (CSV) whenever an agency asks.
audit-log.N-2026-0418-3104
Reyes, M. · CA EDD · chain verified Apr 22 14:48:23 UTC
events · 14
notice.receiveda8f2 9c1e
notice.parsed92cb 4d70
facts.pulled · adp_runb3d7 4f0a
facts.verified · 3 paystubs5e8a 8137
draft.generated · §1256c1e9 7b22
draft.edited · sudheer.md4a1 0f93
draft.approved · partner71f0 cd5b
filing.submitted · sidese7b2 ac84
filing.confirmed · sx-44021f1d3 22e7
artifacts · 7
notice.original.pdf · 312 kb0a2c
response.final.pdf · 184 kb9b8e
facts.json · 4.2 kb3f7a
filing-confirmation.pdf · 22 kbd109
✓ HASH CHAIN VERIFIEDe7b27c11a4d309ac84f1d322e791b8e0a2c93f7a5e8a8137c1e97b22d4a10f93
Sample audit log · identifying details fictional
§ infrastructure
Built on the rails states already use.
Kreto does not screen-scrape portals or rely on email-parsing hacks. We build on the national electronic exchange systems that power state compliance.
SIDES E-RESPONSE
NASWA certification in progress
Kreto is completing SIDES E-Response certification with the National Association of State Workforce Agencies. Once certified, UI claims and responses flow electronically through the SIDES Central Broker — the same system used by every major TPA.
§ integrations
Where your firm already keeps the facts.
Drafts pull employment dates, separation reasons, and wages directly from your payroll provider. No duplicate data entry; no copy-paste mistakes; every fact is sourced and citable in the audit pack.
Finch
api · live
CSV / XLSX upload
csv · live
Paychex Flex
api · live
Intuit QuickBooks
api · live
Gusto
api · live
Rippling
api · live
Justworks
csv · live
BambooHR
csv · live
Trinet
api · Q3
Paylocity
api · Q3
§ customer outcome
We don't reconstruct anything. The audit pack is the response. When the state called about a 2024 charge, I downloaded one PDF and the question was over.
Elena Marquez, CPA composite
Partner · Marquez & Bell · 480-employee book of business · 7 states · sample case study
Median response time · Marquez & Bell
11 days4 days
before kretoafter, 6 mo.
§ security
Your data never leaves the vault.
Compliance data includes SSNs, wages, and employer tax IDs. Kreto treats every byte as if it were our own — encrypted at rest and in transit, redacted before it touches the model, with an independent SOC 2 Type II audit in progress.
AES-256 encryption
All data encrypted at rest and in transit. SIDES payloads use RSA-signed envelopes with AES-256-CBC encryption.
TLS 1.3
Every connection to Kreto uses TLS 1.3. No data leaves your browser unencrypted — ever.
PII redaction
SSNs, EINs, and bank identifiers are stripped before any AI processing. Raw PII never touches the LLM.
SOC 2 Type II (in progress)
Security, availability, and confidentiality audit underway with an independent firm — expected 2026.
Put your first notice to work. 30 days free.
Connect payroll, upload one notice, and watch it come back as a dollar figure, a deadline, and a letter waiting on your signature. No card to start; no commitment after the trial.