Security

SoftLavka is built so that customer configuration and business data stay under the customer’s control. Below is how we approach security for the public site and the platform.

1. Transport

Public SoftLavka hostnames are served over HTTPS. softlavka.com uses HSTS so browsers prefer encrypted connections after the first visit.

2. Access control

The SoftLavka ERP app uses authenticated accounts and connection-scoped permissions. Platform administration is restricted to authorized operators.

3. Tenant and data isolation

Application data is stored in customer database connections. Modules install into the selected connection; SoftLavka does not mix customer databases for convenience.

4. Infrastructure

Production services run in controlled environments (including EU / UA data centers as described on the site). We apply updates and monitor availability for hosted components we operate.

5. Reporting a vulnerability

If you believe you have found a security issue, email security@softlavka.com with enough detail to reproduce it. Please do not publicly disclose until we have had a reasonable time to investigate and fix.

6. Privacy

Personal-data practices for the marketing site and leads are described in our Privacy Policy.