Security
Your supply chain data
stays yours.
WERISCO reads operational data from your core systems. Here is exactly how it's isolated, accessed and protected.
- Data isolation
- Every record is scoped to your organization. Queries are filtered by tenant at the API layer, so one customer's data is never returned to another.
- Authentication
- Token-based authentication with short-lived access tokens and refresh tokens. Password reset and team invitations use single-use links.
- Authorization
- Role-based access inside each organization. Administrative actions are restricted to administrator roles.
- Encryption
- ERP connector credentials are encrypted at rest on the server and never returned to the browser. Traffic is served over HTTPS.
- Auditability
- Security- and admin-sensitive actions write an audit record. Recommendations, approvals and outcomes are logged.
- Access controls
- Connectors use read-only integration users you create and can revoke. API rate limiting and security headers are applied to every request.
- Data ownership
- Your data remains yours. It is used only to provide the service to your organization.
- Retention
- Retention and deletion terms are agreed in your contract, including how your data is returned and removed at the end of the relationship.
Read-only by design
WERISCO never writes to your ERP. Recommendations are executed by your team in your own systems, so your system of record stays under your control.
Certifications
We only list certifications we hold. For security questionnaires, architecture details or a data processing agreement, contact contact@werisco.com.
Supply chain audit
See where your supply chain is exposed.
A 20-minute call and two file exports: stock by item and open orders. You see the inventory and order value exposed. No integration, no savings estimate, and an NDA if you need one.