Security and trust

Controls implemented in the product, listed plainly. We do not claim certifications.

Sign-in and sessions

  • Argon2id hashing

    Passwords are hashed with Argon2id. A configurable password policy includes a strength meter.

  • Lockout

    After five failed sign-ins, the account is locked for 15 minutes.

  • Hardened sessions

    Sessions are hardened against common attacks.

Application protection

  • CSRF protection

    Every form carries CSRF protection.

  • Prepared statements

    SQL runs through prepared statements.

  • Private storage

    Uploaded files live in private storage folders.

Accountability and access

  • Append-only audit trail

    Every change is recorded, and the record is append-only.

  • Permission matrix

    Permissions combine action, records scope and amount limit, with personal permissions and a view of what each user can do.

  • Three access tiers

    Developer, Administrator and User.

  • Approvals

    Rules by document type and amount, up to five levels.

  • Backups

    Scheduled one-file backups of the database and uploaded files.

See NEP ERP on your own numbers.

Tell us about your business and the modules you need. We will arrange a demonstration.

Request a demo Request a quote
Request a demo