Security
Ulka is built as multi-tenant software, so isolation and access control are part of the foundation rather than an afterthought. We describe only the capabilities the platform actually implements, with no unverified certifications or compliance claims.
Each organization’s data is separated at the tenant level, so businesses never see one another’s data.
Granular permissions determine exactly who can view and act on each part of the system within an organization.
Secure sign-in with hashed passwords and rotating refresh tokens, with optional email verification.
Every request is scoped to your active organization and validated on the server, not just in the browser.
Sensitive create, update and delete actions are recorded with the actor and context for accountability.
Inputs are validated and endpoints are protected throughout, and error responses never leak internal details.
Sign-in, onboarding and other sensitive endpoints are rate limited to resist automated abuse.
Traffic to the application is served over encrypted connections (HTTPS/TLS) in production.
Ulka is multi-tenant by design. Your organization’s records are isolated from every other organization on the platform, and access inside your organization is governed by role-based permissions. Every request is tied to your active organization and re-checked on the server, so a user can only ever reach the data and actions their role allows.
Security is a partnership. We secure the platform; you help secure your organization. Use strong, unique passwords, grant each user the least access they need to do their job, review roles and access periodically, and keep any API keys or integration credentials secret and rotate them when needed.
If you believe you have found a security issue, we want to hear from you. Email the details to support@ulkaerp.com so we can investigate and respond. Please give us a reasonable opportunity to address an issue before disclosing it publicly.
Country-specific compliance, such as e-invoicing where it is required, is applied automatically based on your organization’s configured country. We describe only capabilities the platform actually implements and do not claim certifications we do not hold.
Start free. The first 100 businesses get 12 months free.
Start free