Docs · Settings and users · Concept

Security, passwords, sessions and data

You will know how logins are protected, how to reset a password or cut off access, what the review-before-post rule means for AI features, and where your data is hosted.

Open NShine ERP All docs

Security in NShine ERP rests on a few plain controls that an administrator runs from the Users screen, on the habit of reviewing anything automated before it posts, and on the hosting and certifications behind the service. This page sets them out so you know what is in your hands and what is in ours.

Passwords And Logins

Office users sign in with their Email and a password. The password is set and reset by an administrator with the key action on the Users list; there is no self-service reset on the screens reviewed, so a user who forgets a password asks their administrator.
Drivers do not have passwords. They log in to the mobile app with a one-time code sent as OTP via WhatsApp, which must be switched on under Settings › Notification Settings, and only when Enable Mobile App is ticked on their record and Enable Driver Mobile App is on for the company.
Give every person their own login. Shared logins make the Created by and Approved by stamps on bookings and vouchers meaningless.

Switching Access Off

To stop someone logging in, edit their user and switch Is Active off. Their name stays on everything they created. Delete a user only if it was created by mistake.
For a driver, untick Enable Mobile App on the driver record; they lose the app the next time it checks in.
Review the Users list regularly and switch off anyone who has left.

Review Before Anything Posts

Automated features never write to your books without a person approving. AI Data Import shows every row as ready, needs review or invalid and saves nothing until you click Confirm. The AI Inbox holds PODs, fuel receipts and documents until someone clicks Approve or Review & create document. The AI Assistant creates and updates bookings in plain language with review before anything posts. Journal vouchers can be saved as Draft and approved later.

Sessions

Sign out on shared computers; the app keeps a user signed in until they sign out or the session ends.
The Time Zone under Settings › Company decides the date stamped on records, so a user working late from another zone does not shift a booking into the next day.

Where Your Data Is Held

NShine ERP runs on Microsoft Azure, with data held in India and the USA regions.
NShine Technologies is certified to ISO/IEC 27001:2022 for information security management and ISO 9001:2015 for quality management.
Your data belongs to you. Every list and report has an Excel export, so you can take a copy at any time.
Files you upload (PODs, documents, receipts) are stored with the record they belong to and are visible only to users of your company.

Good Habits

One login per person, with the narrowest Role that lets them work.
Switch Is Active off the day someone leaves.
Keep the Settings and Users screens to a small number of trusted users.
Export your key lists to Excel at month end and keep the files somewhere you control.

Need Help?

Chat with the NShine ERP support team on WhatsApp at +91 79950 87755, or ask from inside the app. Last checked 9 November 2026 against app.nshineerp.com.