PensionOS

Administration for public retirement funds

A pension is a promise. This is the system that keeps it.

PensionOS runs the public transparency site, the member portal, the administrator’s desk, and the mobile app for a public retirement fund. One ledger of posted paychecks drives every benefit number, and every number shows the window and the formula it came from.

Get early access See a statement
In development Built on synthetic data

The platform

Four front doors. One ledger underneath.

A fund serves the public, its members, its administrators, and its retirees on the move. PensionOS gives each of them a purpose-built surface, and every one reads from the same source of truth.

01 · The public

A transparency site

Statutory postings with named owners and cadences, source-cited plan figures, and a no-login benefit estimator. The fund meets its public obligations by default, not by memory.

Postings · estimator · open record
02 · The member

A member portal

Every paycheck ever contributed, benefit estimates with the full calculation waterfall, and survivor-option comparisons. Printable reports worth handing to a spouse or an advisor.

Ledger · estimates · statements
03 · The administrator

An operations desk

Payroll files import through a 15-check reconciliation gate, with quarantine and named-admin overrides. Nothing posts until the batch proves itself against the plan.

Import · reconcile · audit trail
04 · On the move

A mobile companion

A retirement-readiness app with the readiness ring and scenario planning, backed by the same ledger-driven pension number the portal shows. The estimate follows the member.

Readiness · scenarios · one number

Every number shows its work

From a posted paycheck to a defensible number.

The benefit a member sees is not typed in. It is computed through a chain a member, an auditor, or a board can follow end to end.

01

Posted pay periods, not typed salaries

The record starts from the paychecks a member actually earned, contributed period by period, rather than a salary figure entered by hand.

source: contribution ledger
02

The highest window, chosen by the system

The final average salary is the highest run of consecutive months allowed by the plan, selected by code and printed on the estimate, so the member sees which window was used.

rule: highest 36 consecutive months
03

One versioned formula, one multiplier

A single, versioned formula with one multiplier drives all five benefit types: normal, disability, vested termination, retro DROP, and death or survivor.

formula: FAS × multiplier × service
04

Integer cents, with the math shown

Every figure is carried in integer cents end to end, with a visible calculation waterfall, so the number reconciles to the penny every time it is run.

precision: integer cents
Normal retirement estimate, synthetic member $8,912.45 / mo

The statement

The document worth handing to your family.

No pension incumbent shows the member the actual artifact. PensionOS makes the promise physical: a printable statement where the window, the formula, and the result are all on one page, and every figure reconciles.

SYNTHETIC DATA
Annual Benefit Statement
Public Safety Retirement System · illustrative
Estimate as of
fiscal year end
Member: Avery StoneID: ····4471Status: ActiveType: Normal retirement
Final average salaryHighest 36 consecutive months, selected by the system$118,832.67 / yr
Plan multiplierPer year of credited service3.00%
Credited servicePosted from contributions on file30 yr, 0 mo
Benefit factorMultiplier × service90.00%
Estimated monthly benefit $8,912.45 / mo
✓Reconciled in integer cents: $118,832.67 × 90.00% = $106,949.40 per year, or $8,912.45 per month. Every figure on this statement is synthetic and for illustration only.

Why a fund can trust it

Serious enough for a Social Security number. Warm enough for a retiree.

Public retirement administration touches the most sensitive data a person has, and the most important number of their later life. PensionOS is built to earn both, and to be honest about what is proven and what is still ahead.

01

Correct by construction

The benefit engine is versioned and covered by tests, carries integer cents throughout, and shows the window and formula behind every figure.

✓ Built, on synthetic data
02

The record proves itself

Payroll imports pass a 15-check reconciliation gate with quarantine and named-admin overrides. Nothing posts to a member until the batch clears.

✓ Built, on synthetic data
03

Sensitive data, handled

Multi-factor sign-in, step-up on sensitive actions, field-level encryption masked to the last four, and an append-only audit trail of every change.

✓ Built, on synthetic data
04

Toward production assurance

Live payroll transport, real member-data cutover, and independent SOC 2 assurance are production gates on the roadmap, held behind counsel and controls review.

In progress · roadmap

Who it’s for

For everyone a pension answers to.

  • i Public defined-benefit retirement funds and their boards
  • ii The administrators who keep the record and run payroll
  • iii Members, beneficiaries, and retirees who rely on the number
  • iv The public the fund reports to, and the auditors who review it

Keep the promise, to the penny.

PensionOS is in active development on synthetic data. Join the early-access list to help shape administration built to be understood by the people who rely on it, and to be first in when it opens for a fund.

Get early access