Cloud ERP - Security

Cloud Infrastructure

The base Cetec ERP platform runs on the Google Cloud Platform.

This provides a secure, globally distributed infrastructure with standard protections in place for network security, encryption, and system availability.

For additional detail:

• Cloud Security Overview
• Cloud Security Whitepaper

These outline how the underlying infrastructure is secured, including physical data centers, network controls, and operational processes.

Data Storage and Backup

Google Cloud servers are backed up nightly.

The Cetec ERP platform also includes export and backup functionality. Customers may use these tools to create and retain their own data backups based on internal policies or requirements.

Additional resources on Google Cloud Backups & Recovery:

• Recovery & Backup Information
• Data Storage

Security Requirements

We break customer security requirements into four categories:

1. Standard Commercial Requirements (no needs/restrictions)

For many manufacturers, standard cloud deployment protections are sufficient.

This includes:

• Encrypted communication (HTTPS, SSH)
• Secure cloud infrastructure
• Application-level access controls

Cetec ERP runs as a standard SaaS system in this environment. This is the default/base hosting on Cetec ERP.

2. ITAR Requirements

ITAR (International Traffic in Arms Regulations) introduces restrictions on where data can be stored and who can access it. This typically applies to companies working with export-controlled defense-related data.

Cetec ERP offers ITAR-compliant hosting through Microsoft Azure GovCloud.

This means:

• Data is hosted in a controlled, U.S.-based environment

• Access can be restricted to meet ITAR expectations

Additional costs apply.

See ITAR hosting details on the Pricing page.

3. CMMC and FedRAMP Requirements

The Department of Defense requires contractors and vendors to meet specific levels of security and auditability (CMMC levels, FedRAMP, etc). The goal is to protect Controlled Unclassified Information (CUI).

This requires:

• Access limited to U.S. persons
• Secured and audited infrastructure
• Providers with defined, auditable processes

Some companies can meet these requirements using ITAR-compliant hosting and keeping regulated documents on their own document server, linking to those documents instead of storing them in the ERP.

Most of the time, these requirements are handled the same way as classified environments to ensure coverage at higher levels.

4. Classified or Air-Gapped Environments

If the data is actually classified, all of it must be kept off the internet. This is implemented as an air-gapped environment, where the internal network is isolated from external networks.

The customer owns the server and the data, which simplifies the audit. Cetec ERP provides guidance on what needs to be done and when, reducing the risk and the level of internal expertise required.

This is typically implemented as:

• Customer-managed servers and infrastructure
• No external network access
• Full control over system and data

This same approach also works for CMMC, FedRAMP, and similar requirements. Note that many cloud ERP systems do not support resident or air-gapped deployments, which becomes a limitation in these environments. Cetec ERP supports these deployment models.

See our CMMC Infrastructure & Deployment page for more information.

Hosting Options

Cetec ERP supports multiple deployment models depending on your requirements.

The standard deployment is SaaS on Google Cloud. For companies with ITAR requirements, hosting is available through Azure GovCloud.

For companies that need more control, Cetec ERP can be deployed in a customer-managed environment. This includes resident hosting, where the system runs on infrastructure you own or control, as well as air-gapped environments for classified data.

A number of ERP systems do not support these types of deployments. This becomes relevant for companies working toward CMMC, FedRAMP, or classified requirements.

See:

• Pricing page (ITAR hosting details)
• Resident Hosting Option
• CMMC Infrastructure & Deployment

Contacting Us

If there are any questions regarding this privacy policy you may contact us using the information below.

Cetec ERP, LLC 3232 E Cesar Chavez St, Suite 2.150, Austin, TX 78702 sales@cetecerp.com