Security
How NexisERP protects your business records
Your accounts, stock and customer records are among the most sensitive information your company holds. This page describes the protections built into NexisERP.
Your company’s data is kept separate
- Each company workspace has its own database. Records of different companies are never stored together.
- A person works only in the companies they have been given access to, and every request is checked against that access.
- Where a group of companies chooses to share product, customer and supplier lists, only those list definitions are shared — ledgers, stock, balances and transactions always stay each company’s own.
Access is controlled by role
- Administrators give each person a role in each company. A role decides which records the person can see and what they can change.
- Permissions are enforced by the server, not just hidden in the screen. Sensitive figures, such as cost prices, are not sent to people who may not see them.
- Administrators can deactivate a user at any time.
Sign-in is protected
- People sign in with a password, or with a passkey on a supported device.
- Repeated failed sign-in attempts are slowed down and temporarily locked.
- Sessions are kept on the server and end after a period of inactivity.
- A workspace can be locked with a PIN while a person steps away.
Records you can rely on
- Posted documents and journal entries are never silently edited or deleted. Corrections are made with credit notes, reversals and linked correcting entries, so the original and the correction both stay visible.
- Business changes are written to an audit trail inside the same transaction, recording who acted and when. The trail cannot be edited afterwards.
- An action repeated by mistake — a double click or a retried request — is carried out once, not twice.
Data protection and availability
- All connections to NexisERP use HTTPS. Stored data, including backups, is encrypted.
- The service runs on managed cloud infrastructure with automated backups, and is monitored continuously with alerts to our team.
- The application’s private pages are never indexed by search engines.
Security is shared
We operate and protect the service. Your company decides who has access and which role each person holds, keeps its passwords private, and removes access when someone leaves. No online service can promise absolute security, which is why NexisERP is built in layers — separation, permissions, audit and encryption.
Report a security concern
If you believe you have found a security issue in NexisERP, please write to support@nexiserp.com with the subject “Security report”. Please do not test against other customers’ data or disrupt the service, and do not include passwords or confidential records in your message.
Questions about security?
We are glad to explain how NexisERP protects your data before you decide.