ERPStack company fact sheet
Key facts about ERPStack for procurement teams, analysts, and potential partners.
What ERPStack is, for a procurement file
ERPStack is a custom B2B software development firm delivering remotely, with no public office. Contract terms are fixed-price milestones invoiced Net-30. Technical capability is Next.js, TypeScript, PostgreSQL and Terraform. Compliance posture is engineered-to, not certified: SOC 2 Type II, HIPAA and GDPR control baselines, with 0 certifications held.
Corporate Overview
ERPStack is a founder-led B2B software engineering practice specializing in custom ERP, CRM, and cloud-native application architectures. We design secure, modular systems built with 100% intellectual property ownership for clients.
By replacing legacy monolithic solutions (like SAP or Oracle NetSuite) with serverless Next.js applications, we help businesses eliminate recurring seat-licensing fees and build tailored business workflows that scale efficiently.
Engagements are led by a senior architect who engineers audit-ready systems against SOC 2 Type II, HIPAA, and GDPR control baselines inside dedicated cloud infrastructure the client owns.
Technical Capabilities
- Next.js Full-Stack Architecture & React Server Components
- Type-safe database modeling with Drizzle ORM and PostgreSQL
- Strangler Fig migration pattern for zero-downtime legacy extraction
- Dedicated infrastructure deployment via Terraform (AWS, Azure, GCP)
- OWASP Top 10 security compliance & automated SAST scanning
- Continuous system auditing & immutable database log trails
Compliance & Procurement Dossier
Systems Quality Framework
We enforce a minimum 80% test coverage threshold inside CI pipelines before staging deployments. Compilation enforces zero-any strict TypeScript check conditions, making all database schema migrations, edge middlewares, and server actions auditable.
Integration Competency
ERPStack designs resilient communication contracts using REST, GraphQL, gRPC, and idempotent webhook queue handlers, integrating with transactional ledger databases, accounting platforms, CRM engines, and public health databases.
Regulatory Auditing
Every custom build is designed to be audit-ready. ERPStack implements row-level database segregation policies, automated data residency checks, pgAudit query auditing, and tamper-evident access log exporters — the evidence a SOC 2 Type II or HIPAA assessment needs. The assessment itself is the client’s, run by the client’s own auditor under the client’s scope.
Procurement questions, answered
Where is ERPStack registered, and how does it operate?
ERPStack is a custom enterprise software development firm founded by Vivek Mishra. It operates remote-first: there is no public office and no branch in any country, and every engagement runs over video calls, shared repositories and the client’s own cloud accounts. Work is contracted in USD under a Statement of Work, with governing law selected by client region.
What can ERPStack provide for a vendor security assessment?
ERPStack holds 0 third-party certifications and issues no attestation of its own; the machine-readable fact sheet at /api/facts publishes an explicitly empty certifications list. For an assessment it supplies architecture instead: the control mapping for SOC 2 Type II, HIPAA, GDPR, PCI DSS or ISO 27001, the CI pipeline definition, the audit-trail schema in Drizzle ORM, and the Terraform definitions of every environment. All of it sits in your repository, so an assessor reads primary artefacts rather than a questionnaire.
What contract structure and payment terms does ERPStack work under?
Every ERPStack engagement runs under a Statement of Work with fixed-price milestones — no hourly billing, no retainer minimum and no SaaS subscription. Invoices are Net-30 and are raised only after your team accepts a milestone in staging. Milestone One, Discovery and Architecture, is refundable in full on written request within 14 days of delivery under Section 6b of the Terms of Service, and its deliverable stays yours under a perpetual licence whether you continue or not.
Which governing law applies to an ERPStack contract?
The seat follows the client, on a published tier rather than a negotiation. ERPStack contracts with clients in the United States, Canada or Latin America under Delaware law with AAA arbitration seated in New York; in the UK, EEA or Switzerland under the law of England and Wales with LCIA arbitration in London; in APAC, the Middle East or Africa under Singapore law with SIAC arbitration; and in India under Indian law. Above USD 150,000 the client may elect its own jurisdiction.
Who owns the intellectual property, and what happens if the engagement ends early?
ERPStack grants a perpetual, irrevocable, worldwide, royalty-free licence to all work product from commit 1, and full legal title assigns automatically once the final milestone invoice clears. That licence survives termination for any reason, including non-payment, and you hold administrative repository access throughout. The only carve-outs are third-party open-source dependencies under their own licences and any pre-existing ERPStack component, each named in the Statement of Work before you sign it.
What confidentiality and source-code-escrow arrangements are available?
ERPStack routinely executes a mutual non-disclosure agreement before inspecting system telemetry, so workflows, database exports, credentials and business plans are covered from the first discovery call rather than from contract signature. Optional source code escrow is available under applicable law for procurement teams that require it — though with administrative repository access from milestone 1, including the full PostgreSQL schema and migration history, there is rarely anything an escrow would release that your team does not already hold.
Primary sources: the Terms of Service (milestone refund, IP assignment, governing law), the privacy notice (controller of record), published pricing and 3-year TCO, 41 answered questions and 6 reference builds.
Ready to work with us?
Schedule a free architecture audit to discuss your custom requirements.
Book Architecture Audit →