Security & Compliance

API Key Storage The INCOTEX API Key is stored in the TIMs INCOTEX Settings doctype, which is restricted by Frappe's role-based access control. Only users with access to the Settings doctype can view or modify the credentials.

HTTPS Communication All API calls to INCOTEX are made over HTTPS, ensuring data in transit is encrypted.

Data Validation Since version 1.0.2, customer Tax IDs (PINs) are validated before invoices are submitted to INCOTEX, preventing invalid submissions.

Audit Trail Every API interaction is logged. ERPNext's Integration Request doctype or equivalent log can be used to trace what was sent, when, and what response was received.

AGPL-3.0 License This app is open source under the GNU Affero General Public License v3.0. This means you can use, modify, and distribute the code, but any modifications deployed over a network must also be made available as open source.