Welcome to STAR ERP (“we,” “our,” “Platform,” or “System”), developed under the software infrastructure of Setapak Langkah. We fully understand that your entire corporate data—ranging from cash flow metrics and inventory records to employee files and supply chain logs—is your company’s most valuable asset. We are fully committed to implementing industry-standard encryption, strict access controls, and absolute transparency to safeguard your data.
B2B Data Relationship Statement (SaaS)
In compliance with global data protection frameworks (including GDPR) and the Indonesian Personal Data Protection Law (UU PDP) No. 27 Year 2022, your corporate organization acts as the Data Controller, while STAR ERP acts exclusively as the Data Processor. We process your data solely based on your written instructions and service agreements.
1. Information We Process
To deliver a fully integrated ERP ecosystem, the STAR ERP platform processes the following categories of data based on the modules you activate:
A. Account Credentials & Employee Data (HRMS Module)
Full names of employees, corporate email addresses, roles and system permissions, department assignments, attendance parameters, payroll databases, and supporting HR documents uploaded by your systems administrator.
B. Financial & Operational Records (Finance & Asset Management Suite)
Cash flow metrics, sales/purchase transaction logs, corporate invoices, warehouse inventory thresholds, fixed asset ledgers, balance sheets, and tax reports generated by the platform.
C. Technical Metrics & Security Metadata (Audit Trail Module)
IP addresses, device hardware profiles, active user interaction logs (who changed what, when, and from where), and secure technical cookies required to maintain authenticated sessions.
2. How We Use Your Information
All processed information is used strictly to ensure the seamless, secure, and efficient operation of your business dashboards:
- To deliver active core ERP modules (Finance, HR, Inventory, CRM, Procurement, and Payroll functions).
- To generate real-time business intelligence (BI) reports and operational dashboards for executive overview.
- To capture system activities within complete *Audit Trails*, protecting your workspace against unauthorized modifications and fraud.
- To route automated system notifications, multi-factor authentication (MFA/2FA) tokens, and vital operational alerts to your staff.
3. Data Security & Multi-Tenant Isolation
Securing your enterprise data is our absolute baseline. We enforce the following multi-layered defense protocols:
High-Grade Encryption
All data in transit is protected using TLS 1.3 encryption protocols. Data stored at rest within our database infrastructure is encrypted using AES-256 standards.
Multi-Tenant Database Isolation
Each corporate client is provisioned with logically isolated database tenant layers to prevent cross-tenant data leaks and visibility.
4. Third-Party Sharing & Sub-Processors
STAR ERP will never sell, lease, or trade your corporate databases to third-party advertising platforms. We share your data only with trusted, compliant sub-processors vital to our cloud operations:
- Cloud Infrastructure Providers: Certified ISO 27001 data centers secured by enterprise-grade firewalls.
- Payment Gateways: Highly secure payment channels used to manage automated billing and invoicing processes.
- Transactional Communication APIs: Delivery networks (such as Twilio or Mailgun) to transmit automated SMS/Email OTP codes and push notifications to your workforce.
5. Data Ownership & Retention Policies
You maintain absolute, unconditional ownership of all records, files, and data uploaded to STAR ERP. You can safely export your databases in structured formats at any point during your active subscription. Upon account termination or non-renewal, your databases will be held securely for a 30-day grace period, after which they will be permanently and irreversibly purged from our active systems and offline backup vaults.
Have Questions Regarding Your ERP Data Security?
Contact our Data Protection Officer (DPO) to receive comprehensive compliance and security audit documentation.