ForgeERP

ForgeERP is designed to comply with the Bureau of Internal Revenue Computerized Accounting System (CAS) requirements under Revenue Regulations No. 11-2014.

• Complete audit trail on all financial transactions
• Immutable journal entries with Hibernate Envers versioning
• BIR form generation (2307, 0619-E, 1601-C, 2550M/Q, 1702)
• EWT, CWT, and VAT computation per BIR rules
• Sales & Purchase journal books for CAS filing

We adhere to the Data Privacy Act of 2012 (RA 10173) and implement industry-standard security measures to protect your business data.

• Multi-tenant data isolation — each organization's data is fully separated
• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Role-based access control with granular module permissions
• Multi-factor authentication (TOTP, SMS, Email OTP)
• Session management with automatic token expiration

Hosted on enterprise-grade cloud infrastructure in the Asia Pacific (Singapore) region for low-latency access from the Philippines.

• Asia Pacific (Singapore) region — closest to the Philippines
• Managed MySQL database with automated backups
• Read/write database splitting for performance
• Application Load Balancer with SSL termination
• Automated container deployments with zero-downtime rolling updates

Security is embedded in our development process, not bolted on as an afterthought.

• Google reCAPTCHA v3 on authentication endpoints
• API rate limiting (100 req/min per IP, 300 req/min per user)
• SQL injection prevention via parameterized queries
• XSS protection with Content Security Policy headers
• Regular dependency audits and vulnerability scanning
• CI/CD pipeline with automated testing gates (80%+ coverage)