CourageMFG

PlatformSecurity

Secure because it runs in your own accounts.

Most software for manufacturers asks you to trust someone else's cloud. CourageMFG runs in your accounts, signs people in with your Microsoft tenant, and acts in Business Central as the person doing the work.

Sign-in with Microsoft Entra

Your people sign in with the same Microsoft accounts they use for Business Central and Microsoft 365, under your tenant's policies: multi-factor, conditional access, joiners and leavers. CourageMFG keeps no passwords.

Business Central permissions apply

Changes people make in Business Central from CourageMFG run as that person, through BC's own APIs and validation: if someone can't post it in BC, they can't post it from CourageMFG, and BC records the person as the one who made the change. Supplier confirmations written in the background run as a dedicated CourageMFG Portal user in BC, with its own permission set.

Who sees what

Roles open each application with read, create, edit and delete rights, and record rules narrow which records a person sees, by owner, department, region, status and more. The database enforces the rules itself, and you can check why anyone can or can't see a record. Until you turn roles on, every signed-in employee can work in every area, the way most mid-market teams work. IT provider staff see only the service desk, and service desk requesters see only their own tickets.

A history on every record

Every stage change and note is recorded on the record with who made it and when. Changes made through Courage Chat or an agent over MCP are recorded under the person who made them.

Scoped access for outsiders

Suppliers sign in with a single-use emailed link and see only their own purchase orders. Your IT provider's staff see only the service desk queue handed to them, and nothing else in CourageMFG.

Your data stays in your accounts

What Business Central doesn't hold lives in a Postgres database in your account, and the application runs in your Cloudflare account. Back it up, report on it or move it; nothing is held hostage.

AI under your control

Courage Chat uses the model provider and key your company chooses, and only ever proposes changes for people to confirm. Agents over MCP sign in with Microsoft Entra and act as the person using them.

Code you can inspect

The application is a TypeScript codebase in your Git repository with automated tests and a deploy pipeline you control. Your security team can read every line.

Bring your security team.

We'll walk them through the architecture, the code and how CourageMFG is deployed in your accounts.