Tenant isolation
Every request is tied to its tenant from the moment a user signs in. Data is filtered per tenant on the server, so one customer's records never appear in another's screens, reports or exports.
Security & trust
Your business data, kept to your business
An ERP holds your prices, costs, salaries and customers. YufuAir is built so that each company sees only its own data, each person can do only what their role allows, and every change leaves a trace.
Roles & permissions
Access is granted by role, down to individual actions – view, create, approve, post. Users can be limited to particular companies and stores.
Segregation of duties
Conflicting rights are kept apart: the person who requests a payment, a price change or a stock adjustment is not the person who approves it.
Approvals
Approval chains by document type, amount and company. Sensitive steps such as payroll sign-off are done by people in the application, not by scripts.
Audit trail
Who created, changed, approved or posted what, and when. Posted documents are corrected by reversal, not overwritten.
Encrypted connections
The application, tills and handhelds talk to the server over HTTPS. Sessions are tied to signed tokens that carry the user and the tenant.
Backups & recovery
Databases are backed up on a schedule, and releases are rehearsed on a copy before they reach production.
Private AI
AI models run on private servers. Each tenant's data is used for that tenant's forecasts and proposals and kept apart from all others.
Where data lives
YufuAir runs in professional data centres. Hosting region and data-residency needs are agreed with each customer as part of the contract.
Responsible disclosure
Found a weakness? Tell us first.
If you believe you have found a security issue in YufuAir or this website, write to us with the details. We will acknowledge your report, investigate and keep you informed.
Questions from your IT or audit team?
We are happy to walk your team through tenant isolation, roles, approvals and the audit trail in a live session, and to answer security questionnaires as part of an evaluation.