security & data

Answers before
the questions.

Who owns the code, where data lives, what happens if one day you stop working with us. These are the right questions to ask any software house: here are our answers.

>_ isolation

Your data, yours only

Every client is isolated at database level with PostgreSQL Row-Level Security: the database itself filters the data, before the code even runs. A second application-level filter is added to every query.

>_ access

Protected access

Passwords hashed with bcrypt, two-factor authentication (Google Authenticator, Authy), short-lived sessions and login rate limits. Roles and permissions for every user.

>_ audit

Everything logged

The activity log keeps a history of logins and changes to clients, contracts and invoices. You always know who did what, and when.

>_ gdpr

GDPR built in

Consents recorded with date and version, data export for portability, an operations log. We sign a data processing agreement (Art. 28 GDPR) with every client.

>_ hosting

Where your data lives

On servers in [European Union — provider, country], with always-encrypted connections (TLS) and minimal containers with no unnecessary tooling. Automatic [daily] backups, kept for [30] days.

>_ code

Who owns the code

Code for modules built specifically for you is [yours / licensed to you perpetually]. CORE stays ours and is licensed for the duration of the contract: that’s what lets us update it for everyone. If you end the contract, we hand your data back in open formats.

faq

Frequently asked questions.

How long does it take?

It depends on scope. A ready-made vertical can be activated in [a few days]; custom software usually takes [6–12] weeks from analysis to go-live. We release incrementally, so you see it working long before the end.

How much does it cost?

A one-off development fee for custom modules, plus a [monthly/annual] subscription covering CORE, hosting, backups and all updates. After the analysis you receive a detailed quote, with no surprises.

What does support include?

Support via [email/phone/ticket] on business days [9am–6pm CET], with a response within [4 business hours] for blocking issues. Bug fixes and CORE updates are always included.

Can I import my existing data?

Yes. We import from spreadsheets, CSV files or your current software, clean it up and check it with you before go-live.

Does it connect to the tools I already use?

Yes. Italian e-invoicing (SDI), mailbox (IMAP/SMTP), SMS, WhatsApp Business and Telegram are ready. For everything else there are APIs and webhooks: the system notifies your other software when something happens (an invoice paid, a new client) and retries on its own if the other system doesn’t respond.

Do I need to install anything?

No. It runs in the browser on computers, tablets and smartphones. From the same codebase it is also available as a desktop app for Windows, macOS and Linux, and is ready for iOS and Android apps.

Can CORE updates break my customisations?

No: customisations live in separate modules that talk to CORE through stable interfaces. Every release goes through a test environment before production.

let’s talk

Pick a time for a call

Book a 30-minute intro call: tell us about your business and we’ll work out together what you need.

Online booking will be available soon. In the meantime, write to us and we’ll suggest a time.

Go to the contact form