Manual QA Tester — Web App + Webhook Integration (Fintech/Document Workflow

Context We run a private investor portal (Next.js web app on Vercel) that moves investor applications through a defined pipeline: application intake → admin approval → contract signing → confirmation → payment → investor information room. Data arrives via webhooks from two external systems, and three manual admin approval gates control the flow. We have a complete written specification that doubles as your test plan. You will validate that the system behaves exactly as specified, end to end, and document every deviation. What you're testing The full investor lifecycle across these stages: Application submission (form → webhook → Portal creates Application record, stores uploaded PDFs, adds to review queue, fires admin email). Admin approval (Gate 1): review queue, Approve action, status transitions, contract-creation trigger. Contract sent and signing round-trip. Signed-contract webhook ingestion (Gate 2): queue entry, PDF storage, status update, admin alert. Admin confirmation (Gate 2): creation of Investor + Investment records, secure PDF storage. Payment confirmation (Gate 3): manual amount/date entry, status change to Active, welcome email. Investor room: login, 2FA setup, project view, documents, updates + archive, distribution history, currency-separated totals. Required test scenarios (must be covered) Happy path: one investor completes the full flow across all three gates; verify every status transition and every record created. Gate enforcement: confirm nothing advances past any of the three gates without the explicit admin click. Application must sit in queue until Approve; no investor/investment record until Confirm; investment stays Awaiting Payment until payment confirmed. Status engine: verify status values are system-controlled with no free-text input, and no invalid transitions are possible. Idempotency / duplicates: resubmit the same application; replay the same signed-contract event. Duplicates must be safely ignored (no double records, no double emails). Webhook processing: confirm records are created only via the defined endpoints and only on valid events. Investor-scoping: confirm an investor can only see projects, documents, and distributions tied to their own investments — no cross-project visibility. Currency display: verify totals render one line per currency, principal only, never combined or netted. Account management: admin-only account creation (no public sign-up), invitation link flow, first-login password + 2FA, session expiry (3 hours / on browser close), email-change confirmation flow. Email triggers: verify the three transactional emails fire on the correct events (new application → admin; signed contract → admin; activation → investor welcome). Negative / edge cases: oversized or wrong-type file uploads, missing required fields, malformed inputs, expired invitation/session links, deactivation and reactivation behaviour. UI review: confirm the investor room matches spec (minimal layout, no dashboards/charts/messaging), navigation is correct, and there are no broken states across the flow. Deliverables Test plan derived from our specification (test case list with expected results) — delivered before execution begins. Executed test log with pass/fail per case. Bug report — every defect with severity (Critical/High/Medium/Low), clear reproduction steps, expected vs. actual result, and screenshots or screen recordings. Summary report with overall assessment and a prioritized fix list. One retest cycle after we fix the reported issues, confirming resolution. Milestones (total US$1,500) Milestone 1 — Test plan approved: US$300. You deliver the test case list mapped to our spec; we approve before you proceed. Milestone 2 — Full test execution + bug report: US$900. Complete execution of all scenarios with the documented bug report and summary. Milestone 3 — Retest after fixes: US$300. Verify our fixes and deliver a final pass/fail confirmation. Freelancer requirements Demonstrable manual QA experience on SaaS web applications. Experience testing webhook-driven or integration-heavy systems. Comfortable with Postman or similar to inspect/replay API and webhook calls. Able to write clear, reproducible bug reports (please share a redacted sample). Bonus: fintech, payments, or document-workflow testing experience. What we provide Staging URL and test credentials for both admin and investor roles. The system specification and process-flow documents (redacted as needed). Test data (sample applications, sandbox contract flow). A named point of contact for questions and for confirming fixes. Ground rules Testing occurs on staging only. Do not test against production. Do not share credentials, documents, or findings with anyone outside this contract. Report Critical defects immediately rather than waiting for the final report.