Everything below is the real architecture — not a page of badges. Where something isn't formal yet, we say so directly rather than imply otherwise.
Every subscribed company gets its own dedicated Frappe site and database — not a row in a shared table with a tenant_id column. There is no code path where one company's ledger can be queried alongside another's, and no "multi-company" add-on that pools data behind the scenes.
Application servers and databases run in a European data center, not a shared platform on another continent.
Daily and monthly backups are GPG-encrypted on our own infrastructure before upload — our storage provider only ever holds data it cannot read.
Every domain — marketing site, application, and demo — is served over HTTPS with automatically renewed certificates. There is no unencrypted path to any of it.
Role-based access down to department level for HR & payroll records, not just "admin or nothing." Every account mapping, fiscal rule, and exported statement passes through an immutable, accountant-signed review log before it's trusted.
We never see or store your full card details — our payment processor, Polar, handles that directly. Our own systems are out of PCI card-data scope by design.
Morocco's Law 09-08 requires a CNDP declaration for processing personal data. Ours is in progress; we'll publish the declaration number here once granted, rather than claim it early.
No hidden fourth parties. If this list changes, it changes here first.
| Provider | Purpose | Data location |
|---|---|---|
| Hosting provider | Application servers, database, file storage | Paris, France (EU) |
| Backup storage provider | Encrypted backup retention — receives only GPG-encrypted archives it cannot read | Outside the EU; content is encrypted before it ever leaves our server |
| Polar | Payment processing and billing | Handled directly by Polar under its own PCI compliance |
| Frappe / ERPNext (open source) | The underlying application framework this product is built on — self-hosted, not a third-party SaaS dependency | Runs entirely on our own infrastructure above |
Both of the forms below are live, functioning endpoints in the actual product, not a contact-us placeholder.
Submits a real request that generates a JSON export of your personally identifiable information and emails it to you directly.
Submits a real deletion request, handled the same way any data-subject rights request is under Law 09-08.
We're a young platform, and we'd rather you hear this from us than discover it during due diligence: we don't yet hold a SOC 2 or ISO 27001 certification, and we don't yet offer a contractual uptime SLA. Our CNDP declaration is in progress, not yet granted. Our full Privacy Policy and Terms of Service are drafted and in legal review — not yet published in final form.
None of that changes what's actually built: the isolation architecture, encrypted backups, and audit-logged review process described above are real, running software today, verifiable in the live demo.
The demo environment runs the actual product — nothing about the architecture above is staged for this page.