Role-based permissions
Rights granted by role, company, document type and field, reviewed with you at go-live.
Platform security
Business-critical data deserves serious protection.
This page describes controls that are implemented and that you can inspect in your own tenant. Where something is not in place, we say so rather than implying it.
What we do not claim
We make no claim to ISO 27001, SOC 2 or GDPR certification, and we publish no uptime guarantee, data-residency promise or encryption standard on this page. If your procurement process requires evidence on any of these, ask us directly and we will give you an accurate current answer.
Controls
Implemented controls
Audit trails
Submitted documents keep version history, timestamps and the user behind each change.
Approval controls
Documents can require approval by value, type or condition before they post.
Data backups
Scheduled backups with documented restoration procedures.
Secure connections
Traffic between browsers and the platform runs over encrypted connections.
Tenant separation
Each customer runs on its own instance and subdomain, with separate data.
Activity monitoring
Login and activity logs available to tenant administrators.
Configurable access policies
Session timeouts, password rules and access restrictions set per tenant.
Responsibility
Where our work ends and yours begins
Most security incidents in business systems involve access, not infrastructure. These are the controls your team owns.
User lifecycle
Adding, changing and promptly removing user accounts when people join or leave.
Permission design
Deciding who may approve, post, export and configure, and reviewing it periodically.
Segregation of duties
Keeping the person who raises a payment separate from the person who approves it.
Next step
See how ERPFin360 can bring your business together.
Discuss your processes, reporting requirements and growth plans with our ERP specialists.