Separate companies, separate books
Each company is its own tenant. You create it, then switch to it in the header. Lists and the journal follow the company you selected. A call without a signed-in session is refused.
← Home
Aurora ERP
CISSP-hardened enterprise resource planning.
Aurora ERP keeps a separate ledger for each company on a server you operate. It covers finance, people, and time. It is built for one operator and is not a shared multi-customer service.
Why choose Aurora
Aurora is an ERP prototype for a company that wants its own books on a server it operates. Each company has its own ledger. You can post entries, import a CSV, and read income, expenses, and net the same day.
A ledger you can post and read the same day
Post journal entries and import a CSV. The dashboard shows income, expenses, and net. Reports open in a GAAP-like layout and a GoB-like layout, in US dollars or the company currency. This is a management view. It is not a filed Form 10-K and it is not an HGB Jahresabschluss.
People, clients, and time beside the books
Keep employees, clients, engagements, timesheets, and utilization next to the ledger. Built-in roles cover administration, accounting, and everyday use, and you can add custom roles.
Your server, not a shared service
Aurora runs on premises or in a private cloud you operate. It is built for one operator, with a separate ledger per company. It is not offered as a shared multi-customer service.
Access control you can explain
Sign-in is email and password. The session is a signed token. Passwords are stored as bcrypt hashes. Login attempts are rate-limited, and security events are written to a log. Aurora is not certified to SOC 2 or ISO 27001.
What the prototype shows
The public prototype at e-softworks.consulting/aurora covers the path you can walk today.
- Sign in, create a company, and switch between companies.
- Post journal entries and import a CSV.
- Read income, expenses, and net on the dashboard.
- Open the GAAP-like report and the GoB-like report.
- Maintain employees, clients, engagements, and time.
CISSP Domain Mapping
Aurora ERP implements security controls aligned with eight CISSP domains:
1. Security and Compliance
- Security policies enforced at application and API layers
- Regular security testing through acceptance tests and CI/CD pipeline
- Compliance support for financial reporting standards (GAAP/GoB/PCG)
2. Access Control
- RBAC with built-in roles (SYSTEM_ADMIN, ACCOUNTANT, USER) and custom role creation
- JWT-based stateless authentication with token revocation support
- Tenant-scoped authorization enforced via PermissionInterceptor and PermissionManager
3. Security Architecture
- Spring Security with method-level @PreAuthorize annotations
- BCrypt password hashing (strength 12) — never stored in plaintext
- CORS configured with explicit origin allowlists and credential controls
4. Identity and Authentication
- Dual authentication: JWT password login + ECDSA wallet signatures (EIP-191)
- Token revocation list prevents replay attacks on revoked sessions
- API key authentication for server-to-server integrations with rate limiting
5. Cryptography
- Ed25519 signatures for wallet-based authentication (secp256k1)
- TLS for all external communications (configured in nginx/production profiles)
6. Data Security
- Tenant isolation enforced at database and application layers — cross-tenant access is impossible
- Audit logging of all permission denials and sensitive operations
7. Software Security
- Flyway database migrations with validate-on-migrate protection
- Spring validation and global exception handling prevent injection and malformed input
8. Security Operations
- Rate limiting on authentication endpoints to prevent brute-force attacks
- Structured logging with MDC context for request tracing and incident response
- Webhook delivery system with retry logic and payload size limits
Module coverage
- Finance: journal CRUD, CSV import, GAAP/GoB/PCG reports, depreciation, fixed assets
- HR: employee management, departments, roles and permissions
- Inventory: products, warehouses, stock, transfers, adjustments, transactions
- Supply chain: purchase orders, purchase requisitions, vendor invoices, goods receipts, three-way match
- Analytics: demand forecasting, portfolio analysis, KPI dashboards, aging reports
What we do not claim
- Not certified against any external compliance framework (SOC 2, ISO 27001). Implements controls aligned with CISSP best practices.
- Not a hosted SaaS offering. Designed for on-premise or private cloud deployment.
What we may say
- Supports audit requirements through append-only logs, tenant isolation, and financial reporting
- On-premise deployment supported; no third-party data processing required
- Full audit trail with security logs and Merkle-provenance pages for data integrity verification