System Architecture

Application Layers

Inventory Pro connects your storefronts and marketplace seller accounts to your warehouses via several layers:

• Web Tier -- The core web application, a mobile UI for pick-and-pack workflows, and REST APIs for external consumption. Each handles specific tasks: order management, warehouse fulfillment, or automated data exchange.
• Business Logic -- Processing engines that manage grid-based bulk fulfillment, shipping label generation, stock depletion routing, and high-volume data imports.
• Data Tier -- SQL Server storage with dedicated databases per seller to ensure data isolation.
• Integration Services -- Always-on sync connectors for e-commerce platforms (WooCommerce natively, others via REST API), EDI exchanges, and automated marketplace feeds.

Authentication

Inventory Pro supports internal credentials for warehouse staff and Single Sign-On (SSO) via your corporate identity provider (Azure AD, Okta, etc.) for administrative teams. We also provide secure OAuth 2.0 endpoints for your custom API integrations.

Cloud Hosting

Inventory Pro is hosted in Microsoft Azure data centers (primarily East US for fast fulfillment routing). Each merchant gets an isolated database — your inventory counts and order history are never commingled with other sellers. If another brand has a massive traffic spike, your sync speeds remain unaffected.

Application Servers

Application servers process the incoming webhooks and store generated documents like packing slips. They scale dynamically to handle order surges.

Database Servers

Your isolated SQL database stores the master ledger of your stock. These servers are locked down behind firewalls and backed up continuously. We can restore to a specific point in time (for example, right before an accidental bulk channel update overwrote your stock counts).

* Direct database access is blocked unless explicitly required for a custom external BI integration.

Security

• Encryption in transit -- TLS 1.2+ enforced on all connections, HSTS enabled.
• Encryption at rest -- AES-256 for backups; Azure platform encryption for storage.
• Restricted administration -- Administrative access requires strong authentication and is not exposed to the public internet. Management interfaces are accessible only through secured internal channels.
• Network segregation -- Production and development environments are physically and logically separated. Firewall rules follow least-privilege principles.
• Role-based access control -- Over 290 configurable permissions, warehouse-level restrictions, and per-page security checks within the application.

CISS aligns with NIST Cybersecurity Framework (CSF) 2.0 as our primary security framework, with voluntary alignment toward ISO 27001:2022 and SOC 2 Type II goals. See our Security & Compliance page for application-level controls.

Backup & Recovery

We maintain a multi-tier backup strategy with geographic redundancy:

• Continuous -- Point-in-time recovery with fine-grained granularity for rapid restoration (where supported by deployment).
• Daily -- Full backups to a cloud recovery vault, retained for 30 days.
• Off-platform -- Encrypted daily backups to a separate cloud storage provider with immutable object locking for ransomware protection.
• Air-gapped -- Daily copies transferred to on-premises storage, physically separated from production.

All backup data is encrypted before transmission and at rest. Archival storage retains data for up to 12 months.

Recovery Objectives

Data Ownership

Clients own their data. CISS acts as a custodian on your behalf, not an owner. You can export your data at any time in Excel, CSV, or PDF format through built-in reporting. If you leave, your data goes with you.

We do not sell, rent, or share your data with third parties. Your business data exists solely to run your operations inside Inventory Pro -- it is never used for analytics, advertising, or any purpose outside your account.

For our full data handling practices, see the Privacy & Data Policy.

Self-Hosted Deployment

Inventory Pro can run on your own Windows servers, whether on-premises or in your own cloud environment. Self-hosted clients manage their own infrastructure, backups, and security configuration. We provide installation documentation, recommended configurations, and optional consulting services. See our documentation for requirements and setup.

Third-Party Components

Inventory Pro uses licensed components from third parties, primarily under MIT, Apache 2.0, and BSD licenses. A full list is available in the License file within your installation. Our cloud infrastructure runs on Microsoft Azure, which holds ISO 27001, SOC 1/2/3, HIPAA, FedRAMP, and PCI DSS certifications.