Security

Last updated: 18 September 2026

Santrix ERP is designed so that control of your data — and its security — stays with you. This is an overview of the model, not a warranty.

Your data stays on your server

Santrix ERP is on-premise. It runs on hardware you own, inside your own network. There is no shared cloud tenancy and no per-user data leaving your building, which removes an entire class of third-party exposure.

Access control

• Role-based access — users only see the modules and actions their role allows.
• Maker-checker approvals on invoices, payments, payroll and VAT, so a second person authorises sensitive actions.
• Full audit trail — who did what, and when, across the system.

Data protection

• Traffic to the app is served over HTTPS, and session cookies are marked secure.
• Passwords are stored hashed, never in plain text.
• Public invoice e-verification is gated by a one-time email code and every check is logged.

Updates you control

We ship signed updates that you apply on your own schedule. Updates are additive and preserve your data and settings — they never wipe your setup.

Backups & continuity

Because the system runs on your infrastructure, backups and disaster recovery are configured to your policy. We provide guidance on a recommended backup routine as part of deployment.

Reporting a vulnerability

If you believe you've found a security issue, please email [email protected] with the details. We take reports seriously and will respond.