CERBEATH gives your organisation one place to issue licenses, define enforcement policies, and act on breaches automatically - across every product you license out, for every tenant you serve.
Illustrative enforcement ledger
100%
Tenant-isolated by database row-level security
RS256
Asymmetrically-signed session tokens
24/7
Remote agent check-in for live enforcement
6
Interface languages, out of the box
CERBEATH isn't a spreadsheet of license keys - it's a policy engine that watches, evaluates, and acts.
Issue, track, and generate keys for every license you grant - edition, seat count, issue and expiry dates, status, all in one register.
Define versioned enforcement policies, attach them to licenses, and configure the exact action taken when a policy is breached.
Section-level read/write/delete/export permissions per role, with per-user overrides - so every team member sees exactly what their role allows.
Every organisation's data is isolated at the database level - one tenant's licenses and enforcement records are never visible to another.
Every sensitive action is written to an audit log the application itself cannot alter or delete - a durable record for every decision made.
A lightweight agent checks in from the licensed product's own server and carries out enforcement locally - no inbound ports, no database credentials on-site.
Consent tracking is built into every user profile, not bolted on afterwards.
Last updated: 12 August 2026
Cookies are small text files a website stores in your browser. CERBEATH (the "Platform"), operated by ATH SOLUTIONS (PTY) LTD ("ATH Solutions", "we"), uses cookies and equivalent browser storage sparingly, and only for functionality strictly necessary to operate the Platform - never for advertising or cross-site tracking.
locale cookie - remembers your chosen display language across visits, set when you use the language switcher.We do not use third-party advertising cookies, analytics trackers, or cross-site tracking technology of any kind. All fonts, scripts, and libraries the Platform needs are hosted on our own infrastructure rather than loaded from third-party content-delivery networks.
You can clear the locale cookie and local storage at any time through your
browser's settings. Doing so will sign you out and reset your language/theme preferences
to their defaults the next time you sign in - it will not affect any data stored on the
Platform itself.
We may update this Cookie Policy if what the Platform stores in your browser changes. We will update the "Last updated" date above when we do.
For questions about this policy, contact info@ath.solutions.
Last updated: 12 August 2026
This Privacy Policy explains how ATH SOLUTIONS (PTY) LTD ("ATH Solutions", "we", "us", "our") collects, uses, discloses, and protects personal information when a tenant organisation and its users use CERBEATH (the "Platform") - the license and enforcement policy management web application - and how you can exercise your privacy rights.
This policy applies to users of a tenant organisation's account on the Platform. It does not apply to third-party websites you may reach through links on the Platform.
Your tenant organisation is the data controller for the personal information of its own users and licensees - it decides why and how that data is used. The Platform is provided as software by ATH Solutions, which acts as a data processor hosting and operating the underlying technology on the tenant's instructions. Each tenant's data is isolated from every other tenant's - your data is never mixed with, or made visible to, another tenant.
Depending on how you interact with the Platform, we may collect:
We collect this data directly from you (e.g. when you register or complete your profile), from your organisation's administrators acting on the organisation's behalf, and automatically through your use of the Platform (e.g. login timestamps).
Where the GDPR applies to our processing of your data, we rely on the following legal bases:
We do not sell your personal information. We may share it with:
We retain your personal data for as long as your account remains active, and for a reasonable period afterwards to satisfy record-keeping, audit, and legal obligations. You may ask about the specific retention period for a category of your data using the contact details in §15.
We apply technical and organisational measures appropriate to the sensitivity of your data, including tenant data isolation so one organisation can never see another's records, role-based access controls, encrypted transport (HTTPS/TLS), salted password hashing, and an append-only audit log of sensitive actions. Full detail is published in our Security Policy.
Subject to the law that applies to you, you generally have the right to:
To exercise any of these rights, use the details in §15, or update your consent status directly from My Profile.
If you are located in the European Union or European Economic Area, the General Data Protection Regulation (EU) 2016/679 ("GDPR") gives you the rights described in §9, plus the right to lodge a complaint with your national supervisory authority. Where we transfer your data outside the EU/EEA (for example, to hosting infrastructure located in South Africa), we do so on the basis of appropriate safeguards, such as standard contractual clauses.
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), gives you the right to know what personal information we collect, use, and disclose about you; the right to delete personal information we hold about you, subject to certain exceptions; the right to correct inaccurate personal information; and the right to opt out of the sale or sharing of personal information. We do not sell or share your personal information for cross-context behavioural advertising. You, or an authorised agent acting on your behalf, may submit a request using the details in §15.
If you are located in South Africa, the Protection of Personal Information Act, 2013 ("POPIA") gives you the rights described in §9, plus the right to object to the processing of your personal information in certain circumstances, and the right to lodge a complaint with the Information Regulator (South Africa).
The Platform uses only what is strictly necessary to operate - see our Cookie Policy for full detail. We do not use third-party advertising or analytics trackers.
We may update this Privacy Policy from time to time to reflect changes to the Platform or applicable law. We will update the "Last updated" date above when we do.
For questions about this policy or to exercise a privacy right, contact info@ath.solutions.
Last updated: 12 August 2026
We take the security of your data seriously. This page describes the technical and organisational measures built into CERBEATH (the "Platform") to protect it, and how to report a concern. No system can guarantee absolute security, but we design and operate the Platform to reduce risk at every layer described below.
The Platform hosts many organisations on shared infrastructure, but each tenant's data is isolated from every other tenant's at the database level using PostgreSQL Row Level Security policies, not merely application-level filtering. Every tenant-scoped request explicitly sets which tenant it is acting for before any data is read or written, so one organisation's users, licenses, and enforcement records are never visible to another.
Access within a tenant's own data is further restricted by role. Platform areas are grouped into sections (Licenses, Enforcement, Users, Administration, and so on), with per-role read/write/delete/export grants and per-user overrides where needed. Every privileged action is checked against the acting user's effective access before it is permitted.
All traffic between your device and the Platform is encrypted in transit using HTTPS/TLS
(with HTTP Strict Transport Security enforced in production). Every response also carries
X-Content-Type-Options: nosniff, X-Frame-Options: DENY,
Referrer-Policy: strict-origin-when-cross-origin, and a restrictive
Permissions-Policy header.
Sensitive actions - such as changes to licenses, enforcement policies, permissions, and
administrative configuration - are written to an append-only audit log. The database role
the application connects as is granted INSERT/SELECT only on
this table and explicitly denied UPDATE/DELETE, so entries cannot
be altered or removed even if the application itself were compromised.
If we become aware of a security incident that is reasonably likely to result in a risk to your personal data, we will investigate promptly and, where required by law, notify affected tenant organisations and/or the relevant regulator without undue delay - including, where applicable, within the 72-hour window required by the GDPR, and in line with the notification duties under POPIA and the CCPA/CPRA.
If you believe you have found a security vulnerability in the Platform, please report it responsibly to info@ath.solutions with enough detail for us to reproduce it. Please do not publicly disclose a vulnerability before we have had a reasonable opportunity to investigate and address it, and do not access, modify, or delete data that does not belong to you while investigating. We will acknowledge good-faith reports made in accordance with this policy and will not pursue legal action against researchers who follow it.
We may update this Security Policy from time to time as the Platform evolves. We will update the "Last updated" date above when we do.
For security reports or questions about this policy, contact info@ath.solutions.
Last updated: 12 August 2026
These Terms and Conditions ("Terms") govern your access to and use of CERBEATH (the "Platform"), a multi-tenant license and enforcement policy management application operated by ATH SOLUTIONS (PTY) LTD ("ATH Solutions", "we", "us", "our"). By creating an account, logging in, or otherwise using the Platform, you agree to be bound by these Terms. If you do not agree, do not use the Platform.
The Platform provides license management, enforcement policy configuration, enforcement action tracking, user and role administration, and audit logging for tenant organisations. Not every feature is available to every user - access is determined by your role within your organisation, as configured by your administrators.
The Platform is intended for authorised users of a tenant organisation. Accounts are created or invited by your organisation's administrators; self-registration, where enabled, may still require activation before you can sign in.
You are responsible for maintaining the confidentiality of your login credentials and for all activity that occurs under your account. Notify your organisation's administrator immediately if you suspect unauthorised access to your account.
You agree not to:
Enforcement policies and actions you configure within your tenant execute against the licensed product(s) and licensee accounts you control. You are solely responsible for the enforcement policies you configure, the licensees they apply to, and their effect - the Platform executes what you configure; it does not independently judge whether an enforcement action is appropriate for a given licensee.
The Platform's software, design, and underlying technology are owned by, or licensed to, ATH Solutions and are protected by applicable intellectual property laws. Your organisation's own content on the Platform (license records, enforcement configuration, and organisation-specific data) remains the property of your organisation. Nothing in these Terms transfers ownership of either party's intellectual property to the other.
Your use of any third-party service you choose to integrate with the Platform is governed by that provider's own terms, and we are not responsible for the availability, accuracy, or conduct of third-party services.
Our collection and use of your personal information is described in our Privacy Policy, which covers your rights under the GDPR, CCPA/CPRA, and POPIA where those laws apply to you, and forms part of these Terms.
Your organisation's administrators may suspend or remove a user's access to the Platform, including where these Terms have been breached. ATH Solutions may suspend a tenant's access where required to protect the Platform or comply with the law. You may stop using the Platform at any time.
The Platform is provided "as is" and "as available". While we take reasonable steps to keep it accurate, secure, and available, we do not warrant that it will be uninterrupted, error-free, or free of defects, and we are not responsible for decisions made in reliance on information recorded on the Platform that later proves to be inaccurate or out of date.
To the maximum extent permitted by law, neither your organisation nor ATH Solutions will be liable for any indirect, incidental, special, or consequential damages arising from your use of, or inability to use, the Platform. Nothing in these Terms limits liability that cannot lawfully be limited, such as liability for death, personal injury, or fraud.
You agree to indemnify and hold your organisation and ATH Solutions harmless from any claim or demand arising out of your breach of these Terms or your misuse of the Platform.
These Terms are governed by the laws of the Republic of South Africa, without regard to conflict-of-law principles, and any dispute arising from them will be subject to the jurisdiction of the South African courts, without prejudice to any statutory rights you may have as a consumer or data subject in your own country of residence (including under the GDPR, CCPA/CPRA, or POPIA, as applicable).
We may update these Terms from time to time. We will update the "Last updated" date above when we do. Continued use of the Platform after a change takes effect constitutes acceptance of the updated Terms.
For questions about these Terms, contact info@ath.solutions.