What your committee will ask.

One multi-tenant platform that runs the whole company rather than one department of it: 28 modules across 55 application screens, grouped the way a business is actually organised — Home, Sell, Operate, Money, People, and Serve & Govern, plus a workspace group for settings, roles, audit, and the developer platform. CRM and pipeline, quotes and invoices, projects, inventory, procurement, assets, automations, finance and accounting, reporting, HR and payroll, recruitment, helpdesk, knowledge base, documents, and contracts all read and write the same records.

No, and this matters. The copilot is not a large language model and does not generate prose about your business. It is a deterministic engine that runs real queries against your own workspace database and returns a computed answer with its working shown — the window it looked at, the record counts, and the basis of the figure. Two consequences follow: it cannot hallucinate a number, because it has no mechanism for producing one that is not in your data; and there are no per-question credits, because there is no third-party model bill behind it.

Each workspace runs with dedicated per-tenant data isolation — your records never share tables with another company’s. You own your data: full export is available on request, and if you ever leave, your records go with you.

Roles are built from a permission matrix of module against view and manage, so what somebody can do is a stated position in a grid rather than an assumption about their job title. Navigation follows the matrix, login is workspace-scoped, password reset is workspace-scoped with it, and two-factor authentication with an authenticator app (TOTP) is available on every account, with the MFA secret stored encrypted.

The audit log is append-only and chained with SHA-256, so altering or removing an entry breaks every hash after it. A verification command re-walks the chain and reports whether it still holds — you get a checked result rather than an assurance. Readiness and integrity check commands cover the deployment itself.

No. We hold no certification, and we do not publish an uptime or SLA figure — claiming otherwise would be untrue. What we can do is show your IT team the shipped controls on a live instance: MFA, the permission matrix, workspace isolation, the chained audit log and its verification command, synchronous virus scanning on document upload, encrypted webhook and MFA secrets, and security headers.

The application is a client of a documented REST API v1, authenticated with Bearer tokens. Writes require an Idempotency-Key, so a retried request from your integration never applies twice — the property that makes automated posting to invoices, stock, and payroll safe to build on. Outbound webhooks carry encrypted secrets, and a transactional outbox guarantees queued events are actually delivered.

Single sign-on (SSO / SAML), an offline-capable client, e-signature, and native mobile applications are roadmap — planned, not promised on a date, and not available today. Everything else described on this site is built and demonstrable on a live instance.

Every colour token meets WCAG AA, and an automated test crawls all screens enforcing accessible names, alt text, a single h1 per page, and labelled form controls. Twenty-three of twenty-three automated tests pass. Accessibility is gated in the build rather than audited once and forgotten.

No. The product does not meter seats and will not shut anyone out at a threshold. Editions carry a licensed staff band — up to 25 on Starter, up to 250 on Business, a quoted band on Enterprise, and unlimited on Enterprise Plus — but these are contract terms, agreed in writing, not runtime shut-offs.

Four editions: Starter at $199/month, Business at $599/month, Enterprise from $1,499/month, and Enterprise Plus from $4,000/month. Annual billing is twelve monthly payments less 15%. Each starts with a one-time implementation — a flat $2,500 on Starter, from $9,000 on Business, and quoted on Enterprise and Enterprise Plus — payable upfront or spread across 12 or 24 monthly installments, depending on the contract you sign. See the Pricing page for the full breakdown.

They are service commitments sold at the top edition, not product features — 24/7 support, a dedicated account manager, high-availability hosting, and disaster recovery are undertakings we make contractually to Enterprise Plus customers. We keep that distinction explicit so nobody mistakes a commercial commitment for something that ships in the box.

Implementation is a scoped engagement, not a download: we provision your workspace, model your org and roles against the permission matrix, import customers, suppliers, catalog, chart of accounts and opening balances, configure approval chains, build automations for your top manual processes, train each team, and stand by through cutover. Starter is a flat fee because the scope is known; larger rollouts are scoped in writing after a walkthrough.