Your financial data deserves serious protection. Here's how OWN ERP keeps it safe.
Signed JWT sessions over HTTPS, with passwords hashed using bcrypt. Sessions expire automatically.
Optional TOTP 2FA (authenticator apps) for an extra layer of account protection.
Cloudflare Turnstile guards the sign-in and public forms against automated abuse.
Granular roles (Admin, Manager, Accountant, Viewer) — including a strict read-only role — enforced on every route and action.
Every record is scoped to your organization and company, so your data stays separate from other tenants.
Sensitive changes are recorded with before/after detail, so you always have an accountable trail.
Sign-in and API requests are rate-limited to mitigate brute-force and abuse.
Inactive sessions are signed out after 8 hours, reducing the risk from unattended devices.
Admins can export a full encrypted-in-transit backup and restore on demand.
Found a security issue? We appreciate responsible disclosure — please reach out at csd.csoft@gmail.com and we'll respond promptly.