Erplain data security and backups

Erplain makes the security of your data a top priority. To that end, several measures are implemented to guarantee you a reliable, responsive, and secure service.

Data Hosting in France

Erplain is hosted in France on AWS serverless infrastructure via Laravel Vapor, providing a stable environment. Erplain data is also stored in France in AWS data centers. This AWS infrastructure complies with ISO 27001 and SOC 2 security standards and is regularly audited by Amazon.

Data Backup

Data is continuously backed up and can be restored to the exact second over a rolling 5-day period.

Data Protection

Erplain is protected by strict user input validation, advanced permission management, and ClamAV antivirus scanning of every file exchanged between the software and its users. A network firewall also protects each environment to filter bots, and strict rate limiting significantly reduces the attack surface for DDoS attacks. The software also follows OWASP security recommendations to guard against common vulnerabilities.

Annual Audit and Pentests

Each year, Blackduck, a cybersecurity specialist, conducts a software audit with both manual and automated Grey Box testing (meaning with only partial knowledge of the infrastructure, in order to replicate the conditions of a potential malicious user).

Two-Factor Authentication (2FA)

Two-factor authentication (2FA) is available on every user profile to add an extra layer of security.

 
User Invoice Archive

Invoices are retained for archiving purposes, unless the user explicitly requests their deletion.

User Permissions and Automatic Sign-Out

The advanced permissions system also allows you to manage each user's access and restrict their scope of action if needed.
 
Inactive users are automatically signed out after 2 hours to prevent any risk of unwanted activity.

Exportable Data

Users can export key account data in CSV or XLSX format, whether contacts, products, or sales, purchase, or inventory documents.