Warehouse worker in a hard hat checking paperwork against stocked shelving

// Platform

27ERP: the ERP, CRM and CMS behind our builds

One system for leads, quotes, invoices paid by card, products, inventory, purchasing, events, donations and your website — with team chat, a QuickBooks Online sync and an AI assistant for the looking-up. Built and operated by 27nodes, branded for each organization, and extended for the way each one actually runs.

// 01

What is 27ERP?

27ERP is a multi-tenant ERP, CRM and content platform built and operated by 27nodes for operators who have outgrown QuickBooks — and for nonprofits that need donations, events and supporters in one place. Each organization gets its own branded workspace at app.27nodes.com with the modules it needs: leads and quoting, invoices paid by card through its own Stripe account, a product catalog that doubles as its PIM, inventory and purchasing with UPS labels, events with QR tickets, memberships, donations, projects, team chat, reporting, a QuickBooks Online sync, and a website that publishes from the same records. An AI assistant answers questions from those records and takes the retyping out of quotes and posts.

  • One workspace per organization, with your logo, brand color and document numbering
  • Modules switched on per organization, from an onboarding wizard that asks nonprofit or business first
  • Customers pay invoices, buy tickets and give by card, straight into your own Stripe account
  • Your books stay in QuickBooks: a CSV export for the accountant, or a sync into your own QuickBooks Online company when you choose to send
  • Team chat next to every record, and AI that answers from your records and drafts the retyping; nothing is saved without a person
  • Sign in with Google or a password, a one-time code at sign-in, roles and an activity log
  • Built and run by 27nodes, so custom rules and integrations are added to the platform instead of forked
  • In production today for ICP Miami, Boca Raton Urban Gardens, Varsity Score and 27nodes itself

// 02 · Modules

10 modules, one set of records

Each module owns its own screens and documents, and every document links to the one it came from. Pick one to see what it does and what it looks like; switch on the modules your organization runs, then add payments, QuickBooks, chat, AI, reports and admin controls across all of them.

CRM & Leads

Every inquiry lands in one pipeline.

Leads arrive from your website forms and quote requests, tagged with the form they came from, get graded hot, warm or cold, and carry a full activity timeline — including the emails you exchange — until they convert into a customer with a draft estimate already filled in.

  • Hot, warm and cold lead grading with an activity timeline on every lead
  • Website contact forms and public request-for-quote forms create leads automatically, each tagged with the form it came from — Contact form, Volunteer sign-up, Newsletter — with a Form column and filter on the list
  • Two-way email: a message to your normal address lands on the right lead, and staff reply from the lead page with their signature and attachments
  • Requested items on an RFQ pre-fill a draft estimate the moment the lead converts
  • One-step convert to Customer that keeps the whole history
See the full module →
The leads list, graded and sortable
Activity timeline on a lead
Convert to a customer, with a draft estimate if you want one

// 03 · How it connects

From a web lead to money in the bank

Conversions are one-to-many: one estimate can become several orders, one order several invoices, and each document carries the numbers of the ones it came from. The same product record prices the quote, feeds the website and sources the purchase order. A gift on a nonprofit's site follows the same path from checkout to a record.

Sell and get paid

Every document links to the one it came from

  1. 01

    Lead

    From a web form or RFQ, tagged with the form

  2. 02

    Estimate

    Priced from the catalog

  3. 03

    Sales Order

    Accepted estimate, one step

  4. 04

    Invoice

    Emailed with its PDF, a pay link and QR

  5. 05

    Paid by card

    Stripe confirms, invoice marks itself paid

  6. 06

    QuickBooks

    Sent when you choose, or exported as CSV

Buy and fulfil

  1. 01

    Purchase Order

    Raised from the sales order

  2. 02

    Receive

    Stock lands in inventory

  3. 03

    Warehouse Receipt

    Fulfilled against stock, backorders tracked

  4. 04

    Ship

    A UPS label bought on your own account, tracking recorded

Publish

Catalog & PIM feeds your website

  1. 01

    Product record

    Aliases, variants, brand, photo, suppliers

  2. 02

    Products feed

    Price, stock and search for your site

  3. 03

    Your website

    Parts search, storefront, articles and pages

  4. 04

    Quote request

    Becomes a lead with the parts attached

Events

  1. 01

    Event page

    Your branding, built for phones

  2. 02

    Checkout

    Free, or paid through your Stripe

  3. 03

    QR tickets

    One per seat, emailed to the buyer

  4. 04

    Door check-in

    Each ticket admits once

Give

For nonprofits: a gift on your own site

  1. 01

    Donate page

    On the nonprofit's own website, no payment keys

  2. 02

    Stripe checkout

    On your account, one-time or monthly

  3. 03

    Gift recorded

    When the money arrives, once per charge

  4. 04

    Supporter record

    Matched by email, or created

  5. 05

    Donors page

    Lifetime total, first and last gift, monthly

AI in every lane

Reads and drafts; a person saves

  1. 01

    Ask

    Answers from your records, with links

  2. 02

    Paste lines

    A part request becomes estimate lines

  3. 03

    Draft an article

    First version from your photos

  4. 04

    You review and save

    Nothing is written without you

// 04 · Who it's for

Built for six kinds of organization

The same platform, a different set of modules switched on.

Service businesses & agencies

Leads from your website with two-way email, a Jira-style board tied to the customer each card is for, team chat next to every record, and card payment on every invoice.

Gyms, studios & clubs

A member roster, plans with entitlement, and a staff check-in screen that decides on the spot and records every denial.

Event hosts

An event page, tickets sold to anyone through your own Stripe account, a QR code per seat by email, an optional waiver signed per order, and a door screen that admits each ticket once.

Companies that publish

Blog and news articles, drag-and-drop pages, a hosted storefront and a customer portal, all delivered to your own site without a redeploy — with AI drafting the first version from your photos.

// 05 · In production

Organizations running on 27ERP

Four organizations, four different shapes — a parts distributor, a community-garden nonprofit, a sports platform and an agency — one platform.

ICP Miami

Heavy equipment parts supplier with warehouses in Miami, Panama and Mexico. Catalog, inventory, quoting, purchasing and the icpmiami.com parts search and customer portal all run on 27ERP.

Read the case study →

Boca Raton Urban Gardens

A 501(c)(3) community-garden nonprofit in Boca Raton, FL. bocagardens.org takes one-time and monthly gifts, sells garden-bed seasons and event tickets, and files its website forms as prospects — all on 27ERP, with nonprofit wording in the back office.

Read the case study →

Varsity Score

Sports scoring and video platform for clubs and tournaments, run as its own company on 27ERP.

Read the case study →

27nodes

We run our own business on it: website leads land in the CRM, client work is tracked in Projects, and this blog is published from Website & Content.

// 06 · Security & compliance

Built to pass a security review

Encrypted everywhere, scoped to your organization on the server, card data never on our servers, on audited infrastructure.

Encrypted end to end

Every connection to app.27nodes.com and the API runs over TLS 1.3 with HSTS, and plain HTTP redirects to HTTPS. Data is encrypted at rest on Google Cloud, and the database is backed up automatically every day.

Two-step sign-in, enforced where it matters

A one-time code at every sign-in is always on for admins and super admins, and an organization admin can require it for everyone or for named people. Google sign-in only reaches accounts an admin already created.

Your records, scoped on the server

Every business record carries your organization's id and every request is scoped to it at the API, with guardrail tests that fail the build if a query forgets. Roles limit what a sales rep can change, and the activity log records who did what, sign-ins and exports included.

Card data stays with Stripe

Invoices, tickets, subscriptions and donations are paid through Stripe-hosted checkout on your own connected account. Card numbers never reach 27ERP, which keeps your PCI questionnaire at the lightest level (SAQ A), and 27ERP never holds your Stripe secret key.

Secrets sealed, credentials hashed

Passwords are hashed with bcrypt; one-time codes, API keys and invitation links are stored only as hashes and shown once. Vendor portal passwords and QuickBooks tokens are sealed with AES-256-GCM under a platform key kept outside the database. Sign-in and public endpoints are rate-limited, public forms sit behind Cloudflare Turnstile, editor HTML is sanitized on every write, and uploads are served only to signed-in users.

Audited infrastructure, US-hosted

The API and database run on Google Cloud (Cloud Run and Cloud SQL in the United States) and the app on Vercel. Both providers hold SOC 2 Type II and ISO 27001 attestations and PCI DSS attestations of compliance, and Stripe is a PCI DSS Level 1 service provider. 27ERP's own controls are documented and walked through with your security reviewer on request.

// 07 · Platform + custom

How the platform fits with a custom build

Most organizations do not need every business rule written from scratch, and none fits a generic template. 27ERP is the middle path: the modules exist and work on day one, and 27nodes extends them for your operation — pricing tiers, approval chains, integrations with the tools you keep.

  • Start with working modules instead of a blank project
  • Custom rules, documents and integrations are built onto the platform by the team that built it
  • Your website, storefront or portal reads live records through the public and portal APIs
  • Accounting stays in QuickBooks, through the export or the Online sync, until you decide otherwise

// 08 · Questions

27ERP, answered

Is 27ERP off-the-shelf software or a custom build?
Both. 27ERP is a platform 27nodes builds and operates, so a new organization starts with working sales, payments, purchasing, warehouse, CRM, events, donations and content modules on day one. Because 27nodes owns the code, the business rules, documents and integrations are then extended for each organization instead of forked — the same team that built the platform builds your customizations on it.
Does 27ERP replace QuickBooks?
It replaces the operational side that QuickBooks was never built for: quoting, sales orders, multi-location inventory, purchasing and backorders. Your accountant keeps working in QuickBooks — through the CSV export, or by connecting your own QuickBooks Online company and sending customers, items, invoices and payments when you choose — so nothing about tax or bookkeeping has to change on day one.
Which modules would my organization use?
Modules are switched on per organization. A parts distributor runs Catalog, Warehouse, Sales, Purchasing and Website; a services business runs CRM, Projects, Sales and Payments; a gym or club runs Memberships, Events and Check-in; a nonprofit runs Donations, Events, CRM and Website with its own wording. Team chat, the dashboard, the AI assistant and the QuickBooks hand-off run across whatever you switch on. Onboarding starts by asking whether you are a business or a nonprofit, then what you do, and removes what you do not need.
What changes for a nonprofit?
The words on the main screens, and three modules. An organization set up as a nonprofit sees Supporters, Prospects, Proposals, Commitments, Funds received and Programs instead of customers, leads, estimates, orders, revenue and projects — the same records underneath, and any word can be changed in Settings → Wording (reports and document editors still use the business word for now). Donations take one-time and monthly gifts on your own Stripe account from your own website. Events sell tickets to workdays and family days, and a season of garden beds can be sold as one event with a ticket per bed, so a plot map on your site reads availability from ticket stock. Website forms — contact, volunteer sign-up, newsletter, sponsorship, waitlist — arrive as prospects tagged with the form they came from, and the invoices you raise, a sponsorship for instance, reach your bookkeeper's QuickBooks through the export or the sync. Boca Raton Urban Gardens runs this way.
How do online donations work?
Your website's donate page posts the gift to 27ERP, which opens Stripe Checkout on your own connected account — one-time or monthly, with a designation, an in-honor or in-memory tribute, anonymous giving and an option to cover the fee. The website holds no payment keys. When Stripe confirms the money, 27ERP records the gift (once per monthly charge, never twice for a retried event), matches the donor by email to a Supporter or creates one, and shows the gift on the Donations list, its own gift page and the Donors page with lifetime totals. Tax receipts and year-end statements are not generated yet.
Does 27ERP sync with QuickBooks Online?
Yes, when you tell it to. An admin connects your own QuickBooks Online company from Settings → Accounting with Intuit's sign-in; any paid QuickBooks Online plan works. The QuickBooks Sync page then takes a date range and shows a plan — which customers, items, invoices and payments would be created, updated or voided — and sends them when you click. Records QuickBooks already has by name or number are linked rather than duplicated, every push is logged, and a chip on each invoice, customer and product shows where it stands. There is no automatic trigger yet, and vendor bills still travel through the CSV export.
Is there a chat for my team?
Yes. Team chat opens from a button on every page: a #general channel everyone is in, public and private channels, and direct messages. You can attach the estimate, invoice or task you are looking at as a chip, @mention a person to ring their bell, format with bold, italic, code, quotes and lists, react with emoji, and pop a conversation out to a full-width page. Messages are pushed live to every open tab. It is separate from Ask: the AI assistant does not read your team chat.
Does 27ERP include PIM (product information management)?
Yes, as the Catalog module. Each product has one master record — pricing, units, weight, taxability, brand, category, photo, options and variants, every cross-reference part number and the vendors who supply it with their cost and lead time. That same record prices quotes, raises purchase orders, carries stock, sits in collections and feeds your website through the public products feed, so there is no separate PIM to keep in sync.
How do customers pay invoices online?
You connect your own Stripe account once, from Settings. Every sent invoice then carries a pay link and a QR code; your customer opens it, pays through Stripe's hosted checkout, and the invoice is marked paid when Stripe confirms. The money goes to your Stripe account directly, 27ERP never stores card details, and checks or wires are recorded by hand in the same payment history. Event tickets, donations and storefront orders use the same connected account.
What does the AI in 27ERP actually do?
Three things inside the app, and one outside it. Ask answers questions about your own records — which invoices are unpaid, how often a part was quoted, what is in stock — and links every record it cites. Paste lines turns a customer's pasted part request into estimate lines matched to your catalog. Article drafting writes a first blog post from your photos. All of it reads through read-only tools and nothing is saved until a person saves it; it is switched on per company with a monthly cap. Outside the app, an admin can make an API key so Claude Desktop, Claude Code or your own script can find, read and change business records through the API, acting as that admin and never touching users, settings or payments.
Can my team sign in with Google?
Yes. Anyone with an account can sign in with Google, and a new user can accept their invitation with Google instead of choosing a password. Google only signs people into accounts your admin has already created — it never creates one — so your admin still decides who has access. A one-time code by email can be required as a second step for everyone or for named people.
Can my website use the data in 27ERP?
Yes. The public products feed powers a parts search or storefront, articles and pages publish to your site without a redeploy, quote and contact forms on your site become CRM leads tagged with the form they came from, event pages sell tickets, a donate page takes gifts, and invited customers log in to a portal to see their own estimates, orders and invoices. icpmiami.com, bocagardens.org and 27nodes.com all work this way.
Does 27ERP have two-factor authentication?
Yes. Two-step sign-in sends a one-time code at every sign-in, and it cannot be turned off for admins or super admins. An organization admin can also require it for everyone on the team or for named people, from Settings → Security and the Users screen. Codes go by email today and by text message once SMS is configured. Codes are stored only as hashes and are never logged. Signing in with Google goes through the same step when it is required.
Is 27ERP SOC 2 or PCI compliant?
Here is the honest version. 27ERP runs on Google Cloud and Vercel, whose infrastructure carries SOC 2 Type II, ISO 27001 and PCI DSS attestations, and every card payment is handled by Stripe, a PCI DSS Level 1 service provider: card numbers never touch 27ERP, so your own PCI questionnaire stays at the simplest level (SAQ A). 27ERP itself has not been through an independent SOC 2 audit yet. What we can show you today: TLS 1.3 everywhere with HSTS, encryption at rest and daily backups, two-step sign-in enforced for admins, records scoped to your organization with guardrail tests, roles, an activity log, hashed credentials and sealed secrets. Ask us for the current security summary before a vendor review.
Where does my data live and who can see it?
Every business record is stored with your organization's identifier and the platform scopes every request to it. Users in your organization see only your organization; roles limit what a sales rep can change versus an admin; private chat channels are read only by their members; and the activity log records who did what to which record.
How do existing customers log in?
At app.27nodes.com/login, with Google or with the email address your invitation was sent to. If you need a password reset or a new user invited, your company admin can do both from the Users screen.

// Boca Raton, FL · Columbus, OH → nationwide

See 27ERP with your own data

Bring a real estimate, a real parts list, a real event, a real donor list or a real membership roster. We will walk it through the platform and show you where a custom rule would go.

Rather talk it through? Call today: (380) 270-2095