This system ran a business before it became a product.

Most management systems are built outside-in: somebody imagines how a business works, then writes software to match the imagination. DecaLeap was built inside-out. It was written to solve problems that were actually on the desk - an order that went out at the wrong price, a warehouse that could not see priority, commissions calculated in a spreadsheet that started an argument with a rep, and a month that closed on two different numbers.

When a system is built that way, two things happen. First, every screen in it is one that somebody opens in daily work. Second, its structure reflects a real business - a customer who is also a distributor’s end customer, an order that ships in three partial despatches, and a person who is both a sales rep and a contractor submitting an invoice. These are everyday cases. This is a Tuesday.

The name came from that gap. Deca - ten. Leap - the jump. The jump itself: moving a business from files to running it in one system.

Security is part of the core, for every user.

This system holds your customer list, the prices you agreed and what your team is paid. These protections are in every account and every package - no surcharge, and no more expensive tier you have to buy to reach them.

• Two-factor authentication from an authenticator app on your phone, with ten single-use recovery codes for a phone that gets lost. A company can require it of everyone.
• A correct password is only half an authentication. Whoever learns it still needs the code from your phone, and each code is valid for a moment only.
• Passwords are stored as salted hashes (scrypt), with a different salt for every user. The stored code cannot be turned back into the password.
• A separate database and a separate process for every customer. Backup, restore and deletion touch your own data alone.
• Access is granted per employee and per module. A module you were not granted vanishes from the menu, and a direct attempt to reach it is blocked too. A warehouse operator does not see commissions; a rep does not see payroll.
• A record of sensitive actions and sign-in attempts - who did what, and when.
• Daily encrypted backups, copied off the server - and a full export to Excel is open to you at any time.

The two-factor design was built to a tax authority’s information-security appendix for invoicing-software vendors (section 17), and it is on for every account in every country.