PRIVACY
ERP data and account privacy
IST ERP is intended for authorized business use. Company records, transactions and user activity are not published as public web pages.
What is stored
The platform stores company configuration, staff login details and password hashes, customers and suppliers, orders, products, stock movements, financial entries, notifications and audit records in its configured database. Passwords are stored as secure password hashes, not plaintext passwords.
Who can access records
Authenticated users can access records according to their company and assigned role. Platform master administrators manage tenant access and company activation without an automatic right to browse company financial data.
Security practices
The application supports CSRF protection, request validation, role checks, HTTPS-only session cookies in production, authentication rate limiting and session invalidation following password changes. Your hosting operator must maintain secure MySQL credentials, HTTPS and server backups.
Data retention and contact
Operational records and audit entries persist until managed under applicable company record-retention and legal requirements. For privacy requests, contact Inovate Solution Technology through its official website.