Aptly TerraSecurity & data
Security & data

Your data is separated, recorded, and yours to take.

Terra runs as a hosted service. The things that matter in an ERP holding your unit prices, your vendor rates and your buyers’ phone numbers are isolation, access control, an audit trail and a way out.

Isolation

Separation enforced where the query is issued.

Every firm is a tenant, and every tenant-scoped query goes through a database client that applies the organisation scope itself. It is not a filter a developer has to remember to add to each query — the unscoped client is a separate thing, used only where there is no tenant yet, such as at login.

Why this design and not a filter

A forgotten where clause is the single most common way multi-tenant systems leak. Making scoping the property of the client rather than the query removes the chance to forget.

Three layers of access
What your firm has licensed, what a role is permitted to do, and what an individual has been granted. A permission has to survive all three.
Modules are entitlements
A module your firm has not licensed is not merely hidden in the interface — its data is not reachable.
Your own user directory
You invite, disable and set access for your own people. You do not raise a ticket with us to remove someone who left on Friday.
Support access is explicit
When we need to see what you see in order to help, that session is initiated deliberately and recorded.
Audit

Every state change is a recorded transition.

Approvals, leads, holds and bookings move through services that validate the move and write an entry: who, what, when, and from which state to which. No screen writes a status column directly.

History outlives the person
A lead timeline or an approval history is complete whether or not the person who created it is still with the firm. Handover is the record.
Deletes are soft
Removing something keeps the row and the history rather than erasing the trail behind it.
Sensitive values are sealed
Credentials for telephony and lead providers are encrypted at rest, not stored as readable configuration.
Exit

A way out, documented before you need it.

Aptly owns and hosts the platform. You own your data. Export produces a manifest plus a CSV per table — everything, in a format that opens in a spreadsheet without us.

We would rather you never use it. We would much rather you know it exists before you sign than discover it does not in the year you want to leave.

On demand, not on request
Export is a function in the product, not an email to support and a three-day wait.
Hosted in India
The application and its data run on infrastructure in the India region.
Dedicated deployment, if you want it
Standard is a shared, isolated deployment. A dedicated environment is available as a paid addition for firms that require it.
Next step

Ask the hard questions early

Bring your IT person or your auditor to the walkthrough. Isolation, access and export are easier to demonstrate than to describe.