Where does my data run?
AskERP processes AI requests on-site. Core operation does not require an internet connection after provisioning.
Review the network and management-access configuration with your IT team.Security & Compliance
AskERP runs in your environment, limits access to approved data, and records how answers are produced. Give your team the controls and evidence it needs to evaluate enterprise AI.
Your environment
The controls below describe AskERP. For custom AI applications, hosting, access, data handling, and review requirements are defined for each project.
The essentials
AskERP processes AI requests on-site. Core operation does not require an internet connection after provisioning.
Review the network and management-access configuration with your IT team.Access is controlled by user, module, and business unit. Governed views limit which ERP records are available for reporting.
Permissions are checked as requests are processed.Query audit records capture the question, executed query, result hash, timestamp, and model version.
Review the retrieval steps and compare results with the recorded hash.Model and prompt changes go through automated tests, evaluation, and review before release.
Review test findings and the release decision with your team.Traceability
A recorded query path helps your team understand how information was retrieved.
Capture the request and apply the user’s access permissions.
Retrieve information through a governed endpoint and database view.
Format the retrieved records and compute a hash of the result set.
Log the query details, timestamp, and model version for review.
A result hash supports integrity checks. It does not, by itself, establish that the source data or an AI explanation is correct.
Testing & review
Automated checks cover application security, access boundaries, audit records, and endpoint health. Model and prompt changes are also evaluated before release.
Request a walkthrough of the current test scope, findings, and how issues are addressed.
Discuss Testing & Evidence →Security review checklist
Review guide · Not a test result or certification
Our testing approach maps checks to OWASP, NIST AI RMF, and selected financial and privacy control areas. Ask for the current mapping and supporting evidence. Automated test results are not an independent SOC 2 report, certification, or a determination of your organization’s compliance.
Details for your IT team
AskERP’s core AI processing runs locally. The architecture includes a separate encrypted management VPN for updates and monitoring that the client can disconnect. Review its configuration, permitted traffic, and operational procedures with your IT team.
The reporting path uses read-only governed views. ERP automation workflows are separately scoped and use approved write or export paths with human review. Confirm which capabilities are enabled for your deployment.
The design uses user, module, and business-unit grants, with PeopleSoft security synchronization. Review authentication, permission updates, and administrator access for your environment.
The design separates ERP data retrieval, locally stored documentation search, and general model knowledge into distinct execution paths. Review how answer sources are labeled and how any added knowledge features use these paths.
Custom applications may use a different deployment model. Hosting, integrations, access controls, logging, retention, and approval steps are agreed during project scoping.
Bring your security questions
Walk through the deployment, data access, test evidence, and audit trail.