
// Platform
27ERP: the ERP, CRM and CMS behind our builds
One system for leads, quotes, invoices paid by card, products, inventory, purchasing, events, donations and your website — with team chat, a QuickBooks Online sync and an AI assistant for the looking-up. Built and operated by 27nodes, branded for each organization, and extended for the way each one actually runs.
// 01
What is 27ERP?
27ERP is a multi-tenant ERP, CRM and content platform built and operated by 27nodes for operators who have outgrown QuickBooks — and for nonprofits that need donations, events and supporters in one place. Each organization gets its own branded workspace at app.27nodes.com with the modules it needs: leads and quoting, invoices paid by card through its own Stripe account, a product catalog that doubles as its PIM, inventory and purchasing with UPS labels, events with QR tickets, memberships, donations, projects, team chat, reporting, a QuickBooks Online sync, and a website that publishes from the same records. An AI assistant answers questions from those records and takes the retyping out of quotes and posts.
- One workspace per organization, with your logo, brand color and document numbering
- Modules switched on per organization, from an onboarding wizard that asks nonprofit or business first
- Customers pay invoices, buy tickets and give by card, straight into your own Stripe account
- Your books stay in QuickBooks: a CSV export for the accountant, or a sync into your own QuickBooks Online company when you choose to send
- Team chat next to every record, and AI that answers from your records and drafts the retyping; nothing is saved without a person
- Sign in with Google or a password, a one-time code at sign-in, roles and an activity log
- Built and run by 27nodes, so custom rules and integrations are added to the platform instead of forked
- In production today for ICP Miami, Boca Raton Urban Gardens, Varsity Score and 27nodes itself
// 02 · Modules
10 modules, one set of records
Each module owns its own screens and documents, and every document links to the one it came from. Pick one to see what it does and what it looks like; switch on the modules your organization runs, then add payments, QuickBooks, chat, AI, reports and admin controls across all of them.
CRM & Leads
Every inquiry lands in one pipeline.
Leads arrive from your website forms and quote requests, tagged with the form they came from, get graded hot, warm or cold, and carry a full activity timeline — including the emails you exchange — until they convert into a customer with a draft estimate already filled in.
- Hot, warm and cold lead grading with an activity timeline on every lead
- Website contact forms and public request-for-quote forms create leads automatically, each tagged with the form it came from — Contact form, Volunteer sign-up, Newsletter — with a Form column and filter on the list
- Two-way email: a message to your normal address lands on the right lead, and staff reply from the lead page with their signature and attachments
- Requested items on an RFQ pre-fill a draft estimate the moment the lead converts
- One-step convert to Customer that keeps the whole history
Sales: Estimates, Orders & Invoices
Estimate to invoice without re-typing a line.
Customers, estimates, sales orders and invoices in one chain. Accept an estimate and the order exists; fulfil the order and the invoice exists — each document numbered, emailed with its PDF and paid from inside the record.
- Customers as companies with contacts, addresses and default payment terms
- CSV import and export for the whole customer list
- Estimates convert to sales orders or straight to invoices, and one estimate can split into many
- Line-level sales tax and an optional per-document discount, snapshotted on each document
- Paste line items straight from a spreadsheet, or paste a customer's part request and let AI match the lines for you to review
Catalog & PIM
One product record, every part number it's known by.
Product information management built in: one master record per product with pricing, units, weights, brand, category, photo, variants, every cross-reference part number a customer might quote, and the vendors who supply it. The same record feeds quotes, purchasing, stock, collections and your website. ICP Miami runs roughly a hundred thousand part numbers here.
- A master record per product: SKU, name, description, status, cost, list and sell price, unit of measure, weight, taxability and a product photo
- Options and variants — size, colour, finish — as rows under the product, each with its own SKU, price and stock, found by the same search and the paste matcher
- Collections: curated, ordered sets of products for merchandising, with their own image and public feed
- Part-number aliases, so a search by any cross-reference number finds the part
- Brands and categories kept as managed lists, not free text
Purchasing
Vendor purchase orders raised from real demand.
Vendors, vendor quotes and purchase orders that start from what your customers asked for. Ask a vendor what a lead's request costs, mark it up into the estimate, raise the PO from the order, and receive it into stock.
- Vendors with contacts, phone and address, plus CSV import and export
- Vendor quotes: ask a vendor to price the lines a lead requested, record their answer, mark it up, and the estimate is priced from it when the lead converts
- Your account number with each vendor, and their portal login kept sealed, on the vendor record
- Purchase orders created directly from sales orders
- Receiving a purchase order moves stock into inventory
Warehouse & Inventory
Know what is on hand, reserved and on backorder.
Inventory with a movement history, backorders tracked until every line ships, warehouse receipts that fulfil against real stock, and shipping labels bought on your own carrier account from the packed receipt.
- On-hand and reserved quantities per location with a full movement history
- Backorders tracked until every line ships
- Warehouse receipts generated from invoices and fulfilled against stock
- Shipping on your own carrier account: quote, buy, print and void a label from the packed warehouse receipt, with the carrier's tracking events pulled in — UPS today
- Tracking number carried into the shipment email and the customer portal
Projects & Tasks
A board your team actually uses, tied to the customer the work is for.
A Jira-style board with the columns you define, cards with an assignee, checklist, comments, history and a work log, and projects that group the work — each card tagged to the customer it is for. 27nodes runs its own client work this way.
- A board with custom columns you add, rename, reorder and remove, and a table view with sortable, resizable, hideable columns and an assignee picker per row
- Cards laid out like a Jira card: project chip, customer chip, priority, assignee avatar, cover image, checklist progress, comment and attachment counts, overdue and blocked flags
- A card opens to its description, checklist and images, a Details rail — assignee, customer, project, priority, due date, estimate, billable — and Activity tabs for Comments, History and Work log
- Projects page: named, coloured projects with done/total bars, archive and search; one project per task
- Filter the board by project, customer or people — click avatars to toggle — and search by number, title, assignee or customer; hide finished work, show archived
Website & Content
Your marketing site reads from the same system.
Blog and news articles, a drag-and-drop page builder, a public products feed, a hosted storefront, quote and contact forms and a customer portal — all delivered to your own website without a redeploy. This site's blog, icpmiami.com and bocagardens.org run on it today.
- Blog and news articles with drafts and preview links before publishing
- A first draft of an article written by AI from your photos and a few sentences, in your own voice
- Pages built with a drag-and-drop page builder and delivered to your site
- Public products feed: catalog and stock power a storefront or parts search
- A hosted storefront at its own address — catalog, product pages with a variant picker, cart and Stripe checkout that becomes a sales order — for a company without a website of its own
Events & Ticketing
Sell tickets to anyone, and admit each one once at the door.
Publish an event page, sell tickets to anyone with an email address — free or paid through your own Stripe account — and check people in at the door by scanning the QR code on their ticket. Buyers need no account. A nonprofit sells a whole season of garden beds the same way: one event, one ticket per bed.
- An event page per event with your branding, cover photo, venue and map link, built to look right on a phone
- Ticket types free or paid, each with its own quantity, per-order limit and sales window
- Capacity enforced as people buy: seats are held while a buyer pays, and two buyers can't both get the last one
- Paid tickets through Stripe Checkout on your own connected account
- One QR code per seat, emailed to the buyer, with an order page and add-to-calendar
Memberships & Check-in
For businesses that sell time and access, not goods.
Gyms, studios and clubs: a member roster, plans with entitlement, and a staff check-in screen that decides on the spot and records every denial with a reason.
- Member roster with M-0001 codes and waiver tracking
- Membership plans and entitlement, sold and cancelled from the member's page
- Staff check-in screen; the server decides entitlement and records denials with a reason
- Classes, sessions and trainer time are next
Donations & Giving
Gifts on your own website, into your own Stripe account.
A donate page on the nonprofit's own website sends the donor to Stripe Checkout on the organization's own account, one-time or monthly. When the money arrives, the gift is recorded, the donor becomes a Supporter, and staff see every gift and donor in the back office.
- Public checkout from your own donate page: preset or custom amount, one-time or monthly
- Designation, a gift in honor or in memory of someone with an optional notification email, anonymous giving, and an option to cover the processing fee
- Stripe Checkout on your own connected account; your website holds no payment keys and 27ERP never sees a card
- The gift is recorded when Stripe confirms the money, once per monthly charge, so a retried event never doubles a gift
- The donor is matched by email to an existing Supporter or becomes a new one, with the gift on their record
Payments with Stripe
Customers pay by card, into your own Stripe account.
Each company connects its own Stripe account. Every sent invoice gets a pay link and a QR code; the customer pays on a page with your branding, Stripe confirms, and the invoice marks itself paid. Checks and wires are recorded in the same history, and event tickets, donations, subscriptions and the storefront all land in the same connected account.
- Connect your existing Stripe account from Settings with Stripe Connect — 27ERP never stores a card or your secret key
- The money goes straight to your Stripe account; 27ERP takes no cut of the payment
- A pay link and QR code on every sent invoice, keyed by an unguessable token rather than the invoice number
- The amount always comes from the invoice on the server, never from the customer's browser
- Stripe's hosted checkout, confirmed by a signed webhook that marks the invoice paid on its own
QuickBooks Sync & Accounting
Your books stay in QuickBooks. Nothing gets retyped.
Connect your own QuickBooks Online company from Settings, then send customers, items, invoices and payments for a date range after reading exactly what will be created, updated or voided. Every invoice, customer and product shows where it stands in QuickBooks. Sends happen when you choose; nothing leaves on its own.
- Connect your own QuickBooks Online company from Settings → Accounting with Intuit's sign-in; any paid QuickBooks Online plan works
- QuickBooks Sync page: pick a date range and read the plan — which customers, items, invoices and payments would be created, updated or voided — before anything is sent
- A QuickBooks chip on every invoice, customer and product: Not in QuickBooks, the QuickBooks number, Send to QuickBooks, Update in QuickBooks, Open in QuickBooks
- Records QuickBooks already has by name or number are linked, not duplicated, and a second run updates instead of re-creating
- Every push is a row in an activity list, failures included, so you can see what went and what did not
Team Chat
Talk about the record you are looking at, without leaving it.
Channels and direct messages in a panel over every page, so the conversation about an estimate, invoice or task happens next to the record — and the record itself travels with the message as a chip. Pushed live to every open tab.
- A #general channel everyone is in, public channels anyone browses and joins, private channels with members added by name, and direct messages
- A floating launcher with an unread badge on every page; the panel stays open as you move between pages, pops out to a full-width view, and goes full screen on a phone
- @First Last mentions and direct messages ring the bell, each a switch on your profile
- Attach the record you are looking at — an estimate, invoice or task — as a chip that links back to it
- Slack-style formatting: bold, italic, strike, code and code blocks, quotes and lists, with a toolbar and ⌘B / ⌘I shortcuts
AI Assistant
AI for the looking-up and the retyping. A person still decides.
AI takes the mundane part of three jobs: Ask answers questions from your own records, Paste lines turns a customer's messy part request into estimate lines, and article drafting writes a first blog post from photos. It reads through read-only tools and never writes a record on its own; every exact value — a part, a link, a record number — is resolved by code, not guessed. With an API key, Claude Desktop, Claude Code or your own script can work in your records through the API.
- Ask, from a button on every page: questions about your own records in plain language, with the page you are on as context
- Answers cite the estimates, invoices, customers and parts they came from, each linked, with the lookups it ran shown underneath
- Read-only by construction: Ask can search documents, part usage, the catalog, customer balances and stock by location — and nothing else
- Role-aware: receivables across the company are answered for admins only
- Paste lines: paste an email, spreadsheet or chat message with part requests and get estimate lines matched to your catalog, with anything unmatched shown, not guessed
Dashboard & Reports
A morning view of the business, and twenty-two reports behind it.
Open the app and see how the period is going, your own work, what needs doing and what just happened. Behind it: sales, receivables aging, inventory, purchasing, margin and pipeline reports with CSV export. The hand-off to QuickBooks — a CSV bundle or the Online sync — lives in its own module.
- Morning dashboard: revenue, open receivables, pipeline value and open estimates for 7 days, month, quarter or year to date
- A revenue chart against the prior period, your assigned tasks, and recent activity
- A needs-attention list built from your records: unsent invoices, overdue invoices, untouched leads — each leaves the list when it is dealt with
- Sales, A/R aging, inventory, purchasing, margin and pipeline reports
- CSV export on every report
Admin, Security & Workspace
Your data, your branding, your roles, your words — and a security review you can pass.
Each organization's records stay its own. An onboarding wizard sets up a business or a nonprofit; sign in with Google or a password plus a one-time code; roles limit who can change what; your branding on every screen and document; modules switched on per organization; settings in tabs, including the words your screens use; an activity log; search across every record; and notifications each person controls.
- Multi-tenant: every record belongs to your organization and stays there
- Onboarding wizard: an invited organization answers one question per screen — nonprofit or business, legal structure, EIN, website and email domain, what it does, which modules — and lands in a live workspace with its first admin and a Finish setting up checklist
- Sign in with Google, or accept an invitation with Google; Google links to an account an admin created and never creates one
- Two-step sign-in with a one-time code at every sign-in: always on for admins and super admins, and an organization admin can require it for everyone or for named people; codes by email today, by text once SMS is configured
- Every connection runs over TLS 1.3 with HSTS and plain HTTP redirects to HTTPS; data is encrypted at rest on Google Cloud with automated daily database backups
// 03 · How it connects
From a web lead to money in the bank
Conversions are one-to-many: one estimate can become several orders, one order several invoices, and each document carries the numbers of the ones it came from. The same product record prices the quote, feeds the website and sources the purchase order. A gift on a nonprofit's site follows the same path from checkout to a record.
Sell and get paid
Every document links to the one it came from
Lead
From a web form or RFQ, tagged with the form
Estimate
Priced from the catalog
Sales Order
Accepted estimate, one step
Invoice
Emailed with its PDF, a pay link and QR
Paid by card
Stripe confirms, invoice marks itself paid
QuickBooks
Sent when you choose, or exported as CSV
- 01
Lead
From a web form or RFQ, tagged with the form
- 02
Estimate
Priced from the catalog
- 03
Sales Order
Accepted estimate, one step
- 04
Invoice
Emailed with its PDF, a pay link and QR
- 05
Paid by card
Stripe confirms, invoice marks itself paid
- 06
QuickBooks
Sent when you choose, or exported as CSV
Buy and fulfil
Purchase Order
Raised from the sales order
Receive
Stock lands in inventory
Warehouse Receipt
Fulfilled against stock, backorders tracked
Ship
A UPS label bought on your own account, tracking recorded
- 01
Purchase Order
Raised from the sales order
- 02
Receive
Stock lands in inventory
- 03
Warehouse Receipt
Fulfilled against stock, backorders tracked
- 04
Ship
A UPS label bought on your own account, tracking recorded
Publish
Catalog & PIM feeds your website
Product record
Aliases, variants, brand, photo, suppliers
Products feed
Price, stock and search for your site
Your website
Parts search, storefront, articles and pages
Quote request
Becomes a lead with the parts attached
- 01
Product record
Aliases, variants, brand, photo, suppliers
- 02
Products feed
Price, stock and search for your site
- 03
Your website
Parts search, storefront, articles and pages
- 04
Quote request
Becomes a lead with the parts attached
Events
Event page
Your branding, built for phones
Checkout
Free, or paid through your Stripe
QR tickets
One per seat, emailed to the buyer
Door check-in
Each ticket admits once
- 01
Event page
Your branding, built for phones
- 02
Checkout
Free, or paid through your Stripe
- 03
QR tickets
One per seat, emailed to the buyer
- 04
Door check-in
Each ticket admits once
Give
For nonprofits: a gift on your own site
Donate page
On the nonprofit's own website, no payment keys
Stripe checkout
On your account, one-time or monthly
Gift recorded
When the money arrives, once per charge
Supporter record
Matched by email, or created
Donors page
Lifetime total, first and last gift, monthly
- 01
Donate page
On the nonprofit's own website, no payment keys
- 02
Stripe checkout
On your account, one-time or monthly
- 03
Gift recorded
When the money arrives, once per charge
- 04
Supporter record
Matched by email, or created
- 05
Donors page
Lifetime total, first and last gift, monthly
AI in every lane
Reads and drafts; a person saves
Ask
Answers from your records, with links
Paste lines
A part request becomes estimate lines
Draft an article
First version from your photos
You review and save
Nothing is written without you
- 01
Ask
Answers from your records, with links
- 02
Paste lines
A part request becomes estimate lines
- 03
Draft an article
First version from your photos
- 04
You review and save
Nothing is written without you
// 04 · Who it's for
Built for six kinds of organization
The same platform, a different set of modules switched on.
Service businesses & agencies
Leads from your website with two-way email, a Jira-style board tied to the customer each card is for, team chat next to every record, and card payment on every invoice.
Gyms, studios & clubs
A member roster, plans with entitlement, and a staff check-in screen that decides on the spot and records every denial.
Event hosts
An event page, tickets sold to anyone through your own Stripe account, a QR code per seat by email, an optional waiver signed per order, and a door screen that admits each ticket once.
Companies that publish
Blog and news articles, drag-and-drop pages, a hosted storefront and a customer portal, all delivered to your own site without a redeploy — with AI drafting the first version from your photos.
// 05 · In production
Organizations running on 27ERP
Four organizations, four different shapes — a parts distributor, a community-garden nonprofit, a sports platform and an agency — one platform.
ICP Miami
Heavy equipment parts supplier with warehouses in Miami, Panama and Mexico. Catalog, inventory, quoting, purchasing and the icpmiami.com parts search and customer portal all run on 27ERP.
Read the case study →Boca Raton Urban Gardens
A 501(c)(3) community-garden nonprofit in Boca Raton, FL. bocagardens.org takes one-time and monthly gifts, sells garden-bed seasons and event tickets, and files its website forms as prospects — all on 27ERP, with nonprofit wording in the back office.
Read the case study →Varsity Score
Sports scoring and video platform for clubs and tournaments, run as its own company on 27ERP.
Read the case study →// 06 · Security & compliance
Built to pass a security review
Encrypted everywhere, scoped to your organization on the server, card data never on our servers, on audited infrastructure.
Encrypted end to end
Every connection to app.27nodes.com and the API runs over TLS 1.3 with HSTS, and plain HTTP redirects to HTTPS. Data is encrypted at rest on Google Cloud, and the database is backed up automatically every day.
Two-step sign-in, enforced where it matters
A one-time code at every sign-in is always on for admins and super admins, and an organization admin can require it for everyone or for named people. Google sign-in only reaches accounts an admin already created.
Your records, scoped on the server
Every business record carries your organization's id and every request is scoped to it at the API, with guardrail tests that fail the build if a query forgets. Roles limit what a sales rep can change, and the activity log records who did what, sign-ins and exports included.
Card data stays with Stripe
Invoices, tickets, subscriptions and donations are paid through Stripe-hosted checkout on your own connected account. Card numbers never reach 27ERP, which keeps your PCI questionnaire at the lightest level (SAQ A), and 27ERP never holds your Stripe secret key.
Secrets sealed, credentials hashed
Passwords are hashed with bcrypt; one-time codes, API keys and invitation links are stored only as hashes and shown once. Vendor portal passwords and QuickBooks tokens are sealed with AES-256-GCM under a platform key kept outside the database. Sign-in and public endpoints are rate-limited, public forms sit behind Cloudflare Turnstile, editor HTML is sanitized on every write, and uploads are served only to signed-in users.
Audited infrastructure, US-hosted
The API and database run on Google Cloud (Cloud Run and Cloud SQL in the United States) and the app on Vercel. Both providers hold SOC 2 Type II and ISO 27001 attestations and PCI DSS attestations of compliance, and Stripe is a PCI DSS Level 1 service provider. 27ERP's own controls are documented and walked through with your security reviewer on request.
// 07 · Platform + custom
How the platform fits with a custom build
Most organizations do not need every business rule written from scratch, and none fits a generic template. 27ERP is the middle path: the modules exist and work on day one, and 27nodes extends them for your operation — pricing tiers, approval chains, integrations with the tools you keep.
- Start with working modules instead of a blank project
- Custom rules, documents and integrations are built onto the platform by the team that built it
- Your website, storefront or portal reads live records through the public and portal APIs
- Accounting stays in QuickBooks, through the export or the Online sync, until you decide otherwise
// 08 · Questions
27ERP, answered
- Is 27ERP off-the-shelf software or a custom build?
- Both. 27ERP is a platform 27nodes builds and operates, so a new organization starts with working sales, payments, purchasing, warehouse, CRM, events, donations and content modules on day one. Because 27nodes owns the code, the business rules, documents and integrations are then extended for each organization instead of forked — the same team that built the platform builds your customizations on it.
- Does 27ERP replace QuickBooks?
- It replaces the operational side that QuickBooks was never built for: quoting, sales orders, multi-location inventory, purchasing and backorders. Your accountant keeps working in QuickBooks — through the CSV export, or by connecting your own QuickBooks Online company and sending customers, items, invoices and payments when you choose — so nothing about tax or bookkeeping has to change on day one.
- Which modules would my organization use?
- Modules are switched on per organization. A parts distributor runs Catalog, Warehouse, Sales, Purchasing and Website; a services business runs CRM, Projects, Sales and Payments; a gym or club runs Memberships, Events and Check-in; a nonprofit runs Donations, Events, CRM and Website with its own wording. Team chat, the dashboard, the AI assistant and the QuickBooks hand-off run across whatever you switch on. Onboarding starts by asking whether you are a business or a nonprofit, then what you do, and removes what you do not need.
- What changes for a nonprofit?
- The words on the main screens, and three modules. An organization set up as a nonprofit sees Supporters, Prospects, Proposals, Commitments, Funds received and Programs instead of customers, leads, estimates, orders, revenue and projects — the same records underneath, and any word can be changed in Settings → Wording (reports and document editors still use the business word for now). Donations take one-time and monthly gifts on your own Stripe account from your own website. Events sell tickets to workdays and family days, and a season of garden beds can be sold as one event with a ticket per bed, so a plot map on your site reads availability from ticket stock. Website forms — contact, volunteer sign-up, newsletter, sponsorship, waitlist — arrive as prospects tagged with the form they came from, and the invoices you raise, a sponsorship for instance, reach your bookkeeper's QuickBooks through the export or the sync. Boca Raton Urban Gardens runs this way.
- How do online donations work?
- Your website's donate page posts the gift to 27ERP, which opens Stripe Checkout on your own connected account — one-time or monthly, with a designation, an in-honor or in-memory tribute, anonymous giving and an option to cover the fee. The website holds no payment keys. When Stripe confirms the money, 27ERP records the gift (once per monthly charge, never twice for a retried event), matches the donor by email to a Supporter or creates one, and shows the gift on the Donations list, its own gift page and the Donors page with lifetime totals. Tax receipts and year-end statements are not generated yet.
- Does 27ERP sync with QuickBooks Online?
- Yes, when you tell it to. An admin connects your own QuickBooks Online company from Settings → Accounting with Intuit's sign-in; any paid QuickBooks Online plan works. The QuickBooks Sync page then takes a date range and shows a plan — which customers, items, invoices and payments would be created, updated or voided — and sends them when you click. Records QuickBooks already has by name or number are linked rather than duplicated, every push is logged, and a chip on each invoice, customer and product shows where it stands. There is no automatic trigger yet, and vendor bills still travel through the CSV export.
- Is there a chat for my team?
- Yes. Team chat opens from a button on every page: a #general channel everyone is in, public and private channels, and direct messages. You can attach the estimate, invoice or task you are looking at as a chip, @mention a person to ring their bell, format with bold, italic, code, quotes and lists, react with emoji, and pop a conversation out to a full-width page. Messages are pushed live to every open tab. It is separate from Ask: the AI assistant does not read your team chat.
- Does 27ERP include PIM (product information management)?
- Yes, as the Catalog module. Each product has one master record — pricing, units, weight, taxability, brand, category, photo, options and variants, every cross-reference part number and the vendors who supply it with their cost and lead time. That same record prices quotes, raises purchase orders, carries stock, sits in collections and feeds your website through the public products feed, so there is no separate PIM to keep in sync.
- How do customers pay invoices online?
- You connect your own Stripe account once, from Settings. Every sent invoice then carries a pay link and a QR code; your customer opens it, pays through Stripe's hosted checkout, and the invoice is marked paid when Stripe confirms. The money goes to your Stripe account directly, 27ERP never stores card details, and checks or wires are recorded by hand in the same payment history. Event tickets, donations and storefront orders use the same connected account.
- What does the AI in 27ERP actually do?
- Three things inside the app, and one outside it. Ask answers questions about your own records — which invoices are unpaid, how often a part was quoted, what is in stock — and links every record it cites. Paste lines turns a customer's pasted part request into estimate lines matched to your catalog. Article drafting writes a first blog post from your photos. All of it reads through read-only tools and nothing is saved until a person saves it; it is switched on per company with a monthly cap. Outside the app, an admin can make an API key so Claude Desktop, Claude Code or your own script can find, read and change business records through the API, acting as that admin and never touching users, settings or payments.
- Can my team sign in with Google?
- Yes. Anyone with an account can sign in with Google, and a new user can accept their invitation with Google instead of choosing a password. Google only signs people into accounts your admin has already created — it never creates one — so your admin still decides who has access. A one-time code by email can be required as a second step for everyone or for named people.
- Can my website use the data in 27ERP?
- Yes. The public products feed powers a parts search or storefront, articles and pages publish to your site without a redeploy, quote and contact forms on your site become CRM leads tagged with the form they came from, event pages sell tickets, a donate page takes gifts, and invited customers log in to a portal to see their own estimates, orders and invoices. icpmiami.com, bocagardens.org and 27nodes.com all work this way.
- Does 27ERP have two-factor authentication?
- Yes. Two-step sign-in sends a one-time code at every sign-in, and it cannot be turned off for admins or super admins. An organization admin can also require it for everyone on the team or for named people, from Settings → Security and the Users screen. Codes go by email today and by text message once SMS is configured. Codes are stored only as hashes and are never logged. Signing in with Google goes through the same step when it is required.
- Is 27ERP SOC 2 or PCI compliant?
- Here is the honest version. 27ERP runs on Google Cloud and Vercel, whose infrastructure carries SOC 2 Type II, ISO 27001 and PCI DSS attestations, and every card payment is handled by Stripe, a PCI DSS Level 1 service provider: card numbers never touch 27ERP, so your own PCI questionnaire stays at the simplest level (SAQ A). 27ERP itself has not been through an independent SOC 2 audit yet. What we can show you today: TLS 1.3 everywhere with HSTS, encryption at rest and daily backups, two-step sign-in enforced for admins, records scoped to your organization with guardrail tests, roles, an activity log, hashed credentials and sealed secrets. Ask us for the current security summary before a vendor review.
- Where does my data live and who can see it?
- Every business record is stored with your organization's identifier and the platform scopes every request to it. Users in your organization see only your organization; roles limit what a sales rep can change versus an admin; private chat channels are read only by their members; and the activity log records who did what to which record.
- How do existing customers log in?
- At app.27nodes.com/login, with Google or with the email address your invitation was sent to. If you need a password reset or a new user invited, your company admin can do both from the Users screen.

// Boca Raton, FL · Columbus, OH → nationwide
See 27ERP with your own data
Bring a real estimate, a real parts list, a real event, a real donor list or a real membership roster. We will walk it through the platform and show you where a custom rule would go.
Rather talk it through? Call today: (380) 270-2095