Trust & protectionOur security
ATOZ ERP is built for businesses that depend on accurate records every day. We combine secure cloud services with an offline-capable desktop app, so your team can work confidently whether online or on site.
Secure connections
- Production services are accessed over encrypted HTTPS connections.
- Security headers and browser protections help reduce common web attacks.
- Cross-origin access is restricted to approved website and application domains.
Authentication & access control
- Users sign in with individual credentials; sessions are protected and time-limited.
- Access is enforced by role and page privileges — users only see what they are allowed to use.
- Each company's data is isolated so one organization cannot access another's records.
- Login and authentication endpoints are rate-limited to reduce abuse.
Desktop & offline use
- The desktop app stores data locally so daily work continues without an internet connection.
- Optional database encryption can protect data at rest on the device.
- The desktop shell uses modern isolation practices so application code cannot be tampered with from untrusted web pages.
- Background sync uploads changes when connectivity is available — you do not manage sync manually.
Synchronization & licensing
- Only modules included in your license are synchronized and available in the product.
- Sync sessions are authenticated and tracked so operations can be monitored and recovered if needed.
- Data changes are applied in controlled batches to keep cloud and desktop copies consistent.
Cloud platform
- Business data is stored in managed database environments with regular backup practices.
- Uploads and sensitive actions require authenticated access — anonymous uploads are not accepted for tenant data.
- Operational logging supports troubleshooting without exposing customer records publicly.
Privacy & your responsibilities
- We collect and use personal information as described in our Privacy Policy.
- Customers should use strong passwords, limit admin access, and keep devices updated.
- Report suspected security issues to our team through official contact channels.
Questions about security or compliance?
Contact our team for product security information or to discuss your organization's requirements.