Hours, invoices, projects, profit, attendance, and time off—one place.

Every vlastERP account operates within its own dedicated PostgreSQL schema — a technique called schema-per-tenant isolation. Your tables, indexes, and data are physically separated from every other customer at the database level. Even in the unlikely event of an application-layer vulnerability, cross-tenant data access is architecturally impossible.

All data in transit is encrypted with TLS 1.3. Passwords are hashed using bcrypt with a cost factor of 12. Authentication uses RS256-signed JWT tokens with a 15-minute access token lifetime and 7-day refresh tokens. We support TOTP-based two-factor authentication compatible with Google Authenticator, Authy, and any RFC 6238-compliant app. API keys are SHA-256 hashed at rest.

Yes. vlastERP supports structured CSV import for clients and invoices with a preview-and-confirm workflow. Export your data from Toggl, Harvest, FreshBooks, or any tool that supports CSV — upload the file, review a preview, and confirm. Each row is validated before insertion.

Invoices are generated with all fields mandated by §14 UStG: sequential numbering, seller and buyer identification including tax IDs, itemized line items, and configurable tax rates (19% standard, 7% reduced, 0% for Kleinunternehmerregelung). Once marked as sent, invoices become immutable — they can only be cancelled with a correction invoice.

Every create, update, and delete operation is logged automatically. Each entry captures: the authenticated user ID, action type, entity type and ID, client IP address, timestamp, and a full JSONB diff of old versus new values. The audit log is queryable by entity, user, action type, and date range.

vlastERP exposes a comprehensive REST API with 111+ endpoints, fully documented in an OpenAPI 3.1.0 specification. You can generate scoped API keys with custom permission sets from your Settings page. The API follows RESTful conventions with consistent JSON envelopes, pagination, filtering, and proper HTTP status codes.

The Solo plan is designed for individual professionals and includes a 2-month free trial. All core features work perfectly for a single user. As long as your monthly invoicing stays under €10k, the trial period is completely free.

Every plan starts with a 2-month free trial, no credit card required. After 2 months, or if your invoicing exceeds €10k/month, or if you add more users, the subscription begins automatically. Cancel anytime.

Yes. vlastERP’s Clocker module works as a standalone tool for clock-in/clock-out, vacation requests, sick leave, and overtime tracking. You can adopt it independently and add invoicing or project management later. All attendance data integrates seamlessly with time tracking and reporting.

vlastERP is designed to meet time recording obligations such as Spain’s RD 8/2019, which mandates daily working-time registration. Clock entries are stored with timestamps, cannot be retroactively altered without an audit trail, and can be exported for labor inspections. Holiday calendars are configurable per country and region.

The Enterprise plan includes Docker-based on-premise deployment. The entire stack — C++17 backend, Next.js frontend, and PostgreSQL 16 — ships as Docker containers. Contact us for Enterprise pricing and dedicated onboarding.