Security

Overview

Bytrionix ERP is built as a multi-tenant cloud application with organization-level isolation, authenticated access, audit logging, and approval checkpoints before sensitive actions.

Platform Controls

• Encrypted transport (HTTPS/TLS) for data in transit.
• Row-level security and organization scoping in the database layer.
• Role-based access within each organization workspace.
• Session hardening: email verification on new devices, optional trusted device, idle timeout.
• Audit events for material changes to finance records and integrations.
• Integration secrets stored separately from connection configuration metadata.

Your Responsibilities

• Use strong passwords and limit admin roles to trusted staff.
• Review integration OAuth grants and disconnect unused connectors.
• Validate AI-assisted extractions and reminders before external actions.
• Maintain endpoint security on devices used to access the platform.

Responsible Disclosure

If you believe you have found a security vulnerability, report it to contact@bytrionix.com with sufficient detail to reproduce the issue. Please allow reasonable time for investigation before public disclosure. We do not support unauthorized testing against production systems.

Availability & Backups

We use managed infrastructure with monitoring and backup practices appropriate for a production SaaS workload. No system is perfectly secure or always available; maintain your own exports for critical records where required.