B2B Software Consulting in Raleigh
North Carolina has no comprehensive consumer privacy statute, so a Research Triangle buyer is ruled by its sector: 21 CFR Part 211 cGMP for RTP fill-finish, DSCSA serialisation, 2 CFR 200 for NC State and Duke grants. ERPStack is remote-first, building custom ERP on PostgreSQL and Drizzle ORM in AWS us-east-1.
Quick Answer
In short: North Carolina has no comprehensive privacy law, so a Raleigh ERP is ruled by its sector: 21 CFR Part 210 and 211 batch records for Research Triangle cGMP manufacturing, DSCSA 582(g)(1) tracing on GS1 EPCIS 2.0, and N.C.G.S. § 75-65 notice to the Attorney General. ERPStack builds it in AWS us-east-1, the parent region serving Raleigh.
Regional Compliance
- 21 CFR Part 210/211 cGMP batch production records
- DSCSA 582(g)(1) tracing on GS1 EPCIS 2.0
- N.C.G.S. § 75-65 notice to the NC Attorney General
- 2 CFR 200 effort and Certified Timesheet Tracking
- FDA 21 CFR Part 11 Compliance for electronic batch records
- N.C.G.S. Chapter 132 public records for UNC systems
Security & Compliance Architecture
North Carolina has enacted no comprehensive consumer privacy statute, so a Research Triangle ERP buyer is ruled by its sector, not by Raleigh. What binds everyone is N.C.G.S. § 75-65 of the North Carolina Identity Theft Protection Act — and, for anything touching a state campus, N.C.G.S. Chapter 132.
§ 75-65: the Attorney General gets told
Every notified breach reaches the North Carolina Attorney General’s Consumer Protection Division; past 1,000 people, every nationwide consumer reporting agency. Substitute notice unlocks only above $250,000 of cost or 500,000 people, so a Raleigh ERP needs RBAC, an Immutable Audit Trail and PostgreSQL row-level policies to scope exposure in hours.21 CFR 211.188: batch records are data
cGMP wants component lots, weights, in-process results and yield against theoretical. As PostgreSQL rows under FDA 21 CFR Part 11 Compliance a Raleigh batch record is queryable; as PDFs bolted onto Odoo or Sage X3 it is not. ERPStack keeps the write path append-only, so a Durham quality reviewer never edits history.DSCSA is fully live in RTP
Stabilisation closed 27 November 2024; FDA exemptions expired 27 May 2025 for manufacturers, 27 August 2025 for distributors, 27 November 2025 for larger dispensers. Small dispensers stay exempt until 27 November 2026. Every RTP manufacturing ERP must already serve GS1 EPCIS 2.0 from PostgreSQL on demand.The 12-digit NDC is a master-data migration
FDA’s final rule of 5 March 2026 makes every National Drug Code 12 digits in one 6-4-2 format, effective 7 March 2033. Every product master, barcode and EPCIS payload in a Raleigh manufacturing ERP inherits it — a seven-year migration SAP S/4HANA and Microsoft Dynamics 365 customers will pay a vendor to schedule.Chapter 132 reaches into your schema
N.C.G.S. § 132-1 counts electronic data-processing records as public records and prices copies at actual reproduction cost. A Raleigh ERP selling into UNC, NC State or a county government needs export, redaction and retention as features, plus Zero-Trust Security between tenants — not a support ticket.
Engineering Blueprint
AWS publishes no Local Zone in North Carolina — Atlanta, Philadelphia and Boston have one, the Research Triangle does not — so Raleigh ERP systems run in us-east-1 (N. Virginia) proper, provisioned with Terraform and Docker. The boundary that decides a Raleigh build is a validated MES against a cloud ERP.
Where the MES stops and the ERP starts
RTP fill-finish keeps the MES and its historian on the plant floor, inside a validation package nobody reopens. ERPStack streams the electronic batch record over AWS Direct Connect into PostgreSQL, parks historian time-series in TimescaleDB and moves plant events on Apache Kafka — an Event-Driven Architecture where genealogy, CAPA and Bill of Materials (BOM) Management live in the ERP, not inside SAP S/4HANA or Epicor ERP.
DSCSA serialisation stored as events
Serialisation is an event stream, not a column. Drizzle ORM models GS1 EPCIS 2.0 events in PostgreSQL behind an Immutable Audit Trail, and Idempotency in API Design stops a replayed 3PL feed double-counting a Raleigh lot. Webhooks & Event Notifications push commissioning events to trading partners.
// Drizzle ORM — GS1 EPCIS 2.0 serialisation event
export const epcisEvent = pgTable('epcis_event', {
sgtin: varchar('sgtin', { length: 64 }).notNull(),
bizStep: varchar('biz_step', { length: 64 }).notNull(),
});Grant accounting for NC State, Duke and UNC
Federal awards make effort reporting a Raleigh ERP requirement. 2 CFR 200.430(g) caps charged effort at 100 percent of compensated activity against Institutional Base Salary; 200.414(f) sets the de minimis rate at 15 percent of modified total direct costs. That is Certified Timesheet Tracking in PostgreSQL with RBAC per award, not a spreadsheet emailed to a Durham department head.
Replacing the RTP incumbent without stopping the line
No Research Triangle plant takes a big-bang cutover. ERPStack runs a Strangler Fig Migration Pattern: Oracle NetSuite or Sage X3 keeps posting the ledger while PostgreSQL takes batch, inventory and DSCSA data first, behind CI/CD Deployment Pipelines in GitHub Actions with Vitest and Playwright gates. Sentry and OpenTelemetry Observability watch every Raleigh cutover slice.
Evaluate Your Stack
Take our interactive audit to see if your architecture is ready for operational scale.
Start Free AuditRegional Infrastructure
Infrastructure Region
Latency Metrics
Primary Datacenter
Success Stories in Raleigh
Artisan Manufacturing ERP
Supply chain and production system for artisan manufacturing
Read Case StudyTarget Industries in Raleigh
Frequently Asked Questions
No. AWS publishes US Local Zones in Atlanta, Boston, Chicago, Philadelphia and Miami, and none of them sits in North Carolina. Raleigh workloads run in the parent region us-east-1 (N. Virginia) directly, which is adequate: an ERP transaction on PostgreSQL is not a latency-bound serverless workload.
Odoo is right when your processes are ordinary and you can live inside its data model; it is cheaper than bespoke. Custom erp development wins when DSCSA serialisation, electronic batch records and quality agreements are the product — in Raleigh and RTP manufacturing, exactly what SAP S/4HANA and Oracle NetSuite cannot standardise on PostgreSQL.
Yes, and in Raleigh it usually should. A qualified MES at an RTP site sits in a validation package that is expensive to reopen. ERPStack connects it over AWS Direct Connect into the VPC, streams electronic batch records into PostgreSQL through Drizzle ORM, and leaves North Carolina batch execution on the plant floor.
From tax years beginning 1 January 2025 the North Carolina franchise tax is $1.50 per $1,000 of tax base, capped at $500 on the first $1,000,000, with a $200 minimum, while corporate income tax falls to 2.00% for 2026. A Raleigh ERP computes that net-worth base in PostgreSQL with Zod-validated inputs.
All of them. Stabilisation ended 27 November 2024, and FDA exemptions expired 27 May 2025 for manufacturers and repackagers, 27 August 2025 for wholesale distributors and 27 November 2025 for dispensers with 26 or more employees. A Raleigh RTP manufacturing ERP must already emit GS1 EPCIS 2.0 from PostgreSQL, not from a 3PL portal.
It rewrites every product identifier. FDA’s final rule of 5 March 2026 requires all FDA-assigned NDCs to be 12 digits in one format — 6-digit labeler, 4-digit product, 2-digit package — effective 7 March 2033. Product masters, barcodes and EPCIS payloads in a Raleigh manufacturing ERP migrate together in PostgreSQL.
The affected people without unreasonable delay, and the Consumer Protection Division of the North Carolina Attorney General’s Office under N.C.G.S. § 75-65(e1). Past 1,000 people you also notify every nationwide consumer reporting agency, so a Raleigh ERP needs RBAC and an Immutable Audit Trail over PostgreSQL to scope exposure.
By allocating payroll at source. For an NC State award, 2 CFR 200.430(g) demands records reflecting total activity and never exceeding 100 percent of compensated activity, measured against Institutional Base Salary, with after-the-fact review. ERPStack models that as effective-dated allocation rows in PostgreSQL with RBAC per Raleigh cost centre — Certified Timesheet Tracking, not a spreadsheet.
Yes. N.C.G.S. § 132-1 defines public records to include electronic data-processing records made or received in the transaction of public business, calls them the property of the people, and prices copies at actual reproduction cost. A Raleigh government ERP needs export, redaction and retention built into PostgreSQL from day one.