Aptly TerraSecurity & data
Security & data

Your data is separated, recorded, and yours to take.

Terra runs as a hosted service. The things that matter in an ERP holding your unit prices, your vendor rates and your buyers’ phone numbers are isolation, access control, an audit trail and a way out.

Isolation

Separation enforced where the query is issued.

Every firm is a tenant, and every tenant-scoped query goes through a database client that applies the organisation scope itself. It is not a filter a developer has to remember to add to each query — the unscoped client is a separate thing, used only where there is no tenant yet, such as at login.

Why this design and not a filter

A forgotten where clause is the single most common way multi-tenant systems leak. Making scoping the property of the client rather than the query removes the chance to forget.

Three layers of access
What your firm has licensed, what a role is permitted to do, and what an individual has been granted. A permission has to survive all three.
Solutions are entitlements
A solution your firm has not taken is not merely hidden in the interface — its data is not reachable.
Your own user directory
You invite, disable and set access for your own people. You do not raise a ticket with us to remove someone who left on Friday.
Support access is explicit
When we need to see what you see in order to help, that session is initiated deliberately and recorded.
Audit

Every state change is a recorded transition.

Approvals, leads, holds and bookings move through services that validate the move and write an entry: who, what, when, and from which state to which. No screen writes a status column directly.

History outlives the person
A lead timeline or an approval history is complete whether or not the person who created it is still with the firm. Handover is the record.
Deletes are soft
Removing something keeps the row and the history rather than erasing the trail behind it.
Sensitive values are sealed
Keys for your lead-source connections, such as your Facebook Page token, are encrypted at rest, not stored as readable configuration.
Exit

A way out, documented before you need it.

Aptly owns and runs the software. You own your data. Export produces a manifest plus a CSV per table — everything, in a format that opens in a spreadsheet without us — and your documents are handed over with it.

We would rather you never use it. We would much rather you know it exists before you sign than discover it does not in the year you want to leave.

The exit terms — notice, export and deletion — are on the plans page.

On demand, not on request
The tables export from inside the product, free, whenever you like — not an email to support and a three-day wait.
Where your data is kept
The application and its database run on servers in Bengaluru, India. Uploaded documents are stored encrypted in private cloud storage, which is not pinned to India.
Backups
The database is backed up automatically every day, so a bad afternoon can be undone.
When you leave
Your full export is free. After you leave, your data is deleted when you ask us to.
Next step

Ask the hard questions early

Bring your IT person or your auditor to the walkthrough. Isolation, access and export are easier to demonstrate than to describe.

Or call +91 70106 18754, or message us on WhatsApp.