Knowledge Base

Inline signup with mandatory OTP

Soviez ERP uses a two-step registration flow on a single page—no external redirect loops. After you submit your name, email, and password:

1. Supabase Auth dispatches a 6-digit email verification code (native email OTP) to your inbox.
2. The registration form transitions to an inline verification wizard where you enter the code and may resend it (subject to a 60-second cooldown to prevent abuse).
3. Upon successful verification, your account is activated and you are routed to the customer dashboard.
4. After five consecutive failed verification attempts, the account enters a 15-minute lockout before further OTP tries are accepted.

Optional Cloudflare Turnstile captcha may be enforced on registration and resend actions when enabled by the platform operator.

Operation 2FA for sensitive license actions

Separate from signup OTP, the dashboard enforces an additional email verification gate before:

• Generating a production license key for the first time; and
• Migrating an existing license to a new database instance.

A one-time 6-digit code is emailed to your registered address, expires in ten minutes, and can only be used once. This 2FA layer protects against unauthorized key burns or instance moves if a session is compromised.

The 1-to-1 Instance Rule

Each Soviez ERP license is cryptographically bound to exactly one database instance fingerprint (MAC::UUID)—the unique identity of your production deployment. This 1-to-1 model prevents key sharing, keeps validation offline, and gives you predictable compliance for internal audits.

• One purchase unlocks one license slot in your dashboard.
• One slot produces one signed key for one database instance fingerprint.
• Validation happens locally—no recurring license server calls during normal operation.
• Production instance only: bind licenses to a real deployed database instance fingerprint. Placeholder or shared fingerprints are rejected at activation and migration.

Ed25519 asymmetric signing

License activation uses Ed25519 asymmetric cryptography. Soviez Cloud holds the vendor private key exclusively on the server; your deployment receives a signed payload that your Soviez ERP node verifies offline with the embedded public key. The instance fingerprint is part of the signed material—changing hosts without a validated migration invalidates the key.

Credit-based self-service migration workspace

Infrastructure changes happen. When you relocate to a new datacenter or rebuild on fresh hardware, use Migration Credits (migration tokens) from your dashboard overview—no need to open a formal support ticket for a standard instance move.

1. Open the license card and choose Migrate Instance.
2. Complete the email 2FA verification step (6-digit code).
3. On the old server, run the deactivation workflow to obtain a local HMAC deactivation receipt—a tamper-evident proof that the prior binding was released before the new instance is authorized.
4. Submit the validated receipt and confirm the new production instance fingerprint (MAC::UUID).
5. The platform re-issues your Ed25519-signed key and deducts one migration credit from your license or account balance.

Credits are tracked per license and at the account level (including add-on token purchases). First-time key generation follows the same 2FA gate before the instance fingerprint is permanently bound. Migrations without a valid deactivation receipt are rejected to prevent duplicate active bindings.

Nancy AI — Guest vs. Verified Member Access

Nancy serves as your virtual assistant on Soviez ERP, providing context-aware guidance and instant system onboarding. Her operational guardrails adapt depending on your session status:

Unregistered Visitors (Guest Access)

• Secure Sandbox: Guests can freely interact with Nancy to learn about Soviez ERP capabilities and functional modules.
• Local Isolation: To preserve your anonymity, chat history is saved exclusively within your local browser memory and is never synchronized with our central cloud infrastructure. For maximum data isolation, your active conversation history is strictly cached within your local browser session and is purged instantly upon logging out or closing the session to maintain zero-trace security.
• Fair Use Allocation: To maintain server high-availability and prevent abuse, guest interactions are subject to standard temporary volume limits. Logging in instantly unlocks uninterrupted continuous dialogue. Guest interactions are also governed by standard daily rate quotas to ensure optimal bandwidth for all visitors.

Registered Customers (Priority Support)

• Context-Aware Assistance: When logged in, Nancy securely references your account profile parameters (such as localization, active licenses, and module configurations) to provide targeted solutions without compromising security.
• Streamlined Ticket Escalation: Should your inquiry require human intervention, Nancy can instantly draft and queue a prioritized technical support ticket directly to our engineers. Priority ticket creation is reserved for enterprise tier accounts with an active Technical Support plan.
• Service Continuity: If our ticketing gateway is experiencing heavy operational loads, your request will be prioritized based on your SLA tier rather than bypassing entitlement checks.
• Persistent Secure Sync: Your chat session history persists safely across your authenticated browsing session, clearing instantly and securely when you sign out of the system.

Nancy — your Technical Support representative

The storefront and dashboard include a Technical Support chat experience powered by Nancy, the Soviez ERP Technical Assistant. She represents the Soviez ERP Support Team and assists with licensing, billing, installation status, and day-to-day product guidance.

• For signed-in customers, Nancy securely adapts answers to your account context—such as bound licenses, available migration credits, and prior ticket references—without exposing sensitive internals.
• Functional answers align with the published product documentation while clarifying Soviez ERP as an independent distribution engineered on the open-source Odoo 18 Community Edition (LGPL-3)—not an Odoo S.A. Enterprise subscription.
• Conversation continuity is retained in your local browser for the duration of your visit, then cleared securely when you sign out.

Threaded support tickets (no duplicates)

When Nancy escalates a case—or you report an unresolved issue while signed in—the platform uses smart ticket threading:

1. If you already have an open or in-progress Technical Support ticket, new descriptions are appended to that ticket's conversation instead of creating duplicate records.
2. Each ticket receives a memorable numeric reference (for example, Ticket #1001) for email and dashboard deep links.
3. Customers view threads in the dashboard Support Tickets tab; administrators work tickets in an Admin console with a chronological timeline and reply composer.
4. Admin replies trigger customer email notifications with a direct link back to the ticket thread.

Managed installation tickets

Installation add-on purchases receive separate memorable ticket references for tracking. Nancy and the dashboard can reference installation status; server credentials are never disclosed through chat.

Corporate billing profile

Before generating an official invoice, complete your Account billing section with:

• Corporate entity name
• Tax registration ID
• Full billing address and country
• Direct billing phone number

These fields are stored securely in your account profile and are visible only to you and authorized Soviez administrators.

On-demand PDF generation

Soviez ERP does not attach PDF invoices to checkout confirmation emails. Instead:

1. Open Purchase History in your dashboard after a paid order.
2. Select Generate Invoice for the purchase row you need.
3. If your billing profile is incomplete, the platform blocks generation and prompts you to finish Tax ID and address fields first.
4. A PDF is rendered on demand and may be downloaded or emailed to your registered address.

Payment confirmation emails acknowledge receipt only—they do not replace formal tax invoices.

When to use it

Select the Managed Installation add-on during checkout if you want our engineers to provision Docker, configure SSL, and validate your first Soviez ERP instance on your server. After payment, a dedicated tab appears in your dashboard.

How requests work

1. Submit credentials for your Installation Request (memorable ticket ID, for example #1002).
2. Our installation team updates ticket status (pending review, in progress, completed).
3. Both sides post updates in the Installation Chater—a chronological activity stream with admin, customer, and system audit messages.
4. You receive in-app and email notifications when admins post updates.

Credentials are encrypted at rest and only used to fulfill your request. You can rotate passwords after go-live.