🇮🇳 India's Own Cloud ERP · No Third-Party Servers · Since 1993 📞 +91 8108050503  ·  ✉ jvgears@gmail.com
GSTPLUS CloudERP
Home Platform Modules Pricing API Docs About Contact 🔐 Login Portal
Company Profile
GSTPLUS CloudERP
India's Complete Cloud ERP Platform & Software Solutions
Developed by JV GEARS Online Solutions — Mumbai · Est. 1993 · Mr. Jitendra Velani
31+ years of enterprise ERP, GST compliance, and accounting software development for Indian businesses.
🔐 Login Portal 📦 View All Modules 💬 WhatsApp Demo
Company Facts
JV GEARS Online Solutions
Legal Name: JV GEARS Online Solutions
Brand: GSTPLUS CloudERP Software Solutions
Website: gstplusindia.com · gstcloud.in · jvgears.com
Developer: Mr. Jitendra Velani (Jitubhai)
Phone: +91 8108050503
Email: jvgears@gmail.com
Email 2: gstplusindia@gmail.com
Location: Mumbai, Maharashtra, India
Established: 1993 (31+ years in ERP development)
Server: Own dedicated cloud server — no Amazon/Google/Azure
🖥 Own Cloud Server Infrastructure
Server Type
Own Dedicated Cloud Server
Data Storage
Company-wise JSON file system
Security
CSRF, bcrypt, HTTPS enforced
PHP Version
7.4+ (tested on 8.1, 8.2)
Database
JSON files — zero SQL dependency
API Auth
Bearer token, rate-limited
Backup
Company-wise folder structure
Uptime SLA
Contact for hosting details
1993
Established
500+
Customers Served
165+
Live Projects
7
ERP Modules
31+
Years Experience
23
GST Return Types Covered
User Roles & Access Levels
RoleAccessExpiry
supervisorFull system admin — companies, users, billing, APINever expires
adminAll modules for assigned company/FYSubscription-based
staffAll modules — no supervisor panelSubscription-based
consultantAll modules — read-only modeSubscription-based
viewerLedger dashboard only — read-only⭐ NEVER expires
7 ERP Modules
Complete Module Suite
Data Architecture
JSON File-Based Storage
All data stored as JSON files — no SQL database required. Company-wise folder structure. Easily portable, backupable, and API-accessible.
gstplus3/ ← Application root ├── data/ │ ├── companies.json ← All companies + modules │ ├── users.json ← Users (bcrypt passwords) │ ├── developer.json ← SMTP, API tokens, passkey │ ├── pricelist.json ← Product price list │ ├── partners.json ← Partner accounts │ ├── orders.json ← Subscription orders │ ├── payments.json ← Payment records │ └── {companyid}/ ← Per-company folder │ ├── ledgers/ │ │ ├── ACC-HDL-001.json ← Ledger data │ │ └── ACC-STR-002.json │ ├── hr_data.json ← Employees, payroll, leaves │ ├── crm_data.json ← Customers, activities, CRM │ ├── gst_portal.json ← GSTR-1/2B/3B filing status │ ├── eway_data.json ← eWay Bill records │ └── documents_meta.json ← Document management ├── includes/ │ ├── config.php │ ├── security.php │ └── auth.php ├── login.php ← Login ├── comselect.php ← Company/FY select ├── ledmgmt.php ← Ledger Dashboard ├── supmgmt.php ← Supervisor admin └── apimgmt.php ← REST API
Ledger JSON Structure
ACC-HDL-00312.json — Ledger File
// Per-ledger file: data/{companyid}/ledgers/{ledgerid}.json { "ledgerid": "ACC-HDL-00312", "name": "Horizon Distributors Pvt. Ltd.", "gstin": "27AADCH3210P1ZQ", "ob": 85000, // Opening Balance "aging": [...], // 6 aging buckets 0-180+ "ledger": [...], // Dr/Cr transaction entries "outstanding": [...], // Invoice-wise outstanding "invReg": [...], // Invoice register (IRN) "gstr1": [...], // GSTR-1 filing per period "gstr2b": [...], // GSTR-2B reconciliation "tds": [...], // TDS/TCS entries "stock": [...], // CRM stock summary "purReg": [...], // Purchase register "bankRecon": [...], // Bank reconciliation "loanLedger": [...], // Loan EMI schedule "pettyCash": [...], // Petty cash entries "bsData": {...} // Balance sheet data }
Ledger Entry fields: date · doc · url · desc · narr · chq · dr · cr · t (type)
Outstanding fields: inv · idate · due · orig · paid · ret · tds · bal · days · status
TDS fields: date · sec · party · pan · type · gross · rate · amt · cert · challan · qtr
GSTR-1 fields: period · filed · invoices[] (no/date/taxable/cgst/sgst/igst/total/status)
Security Features
Enterprise-Grade Security
🔐
CSRF Protection
All forms protected with cryptographic CSRF tokens. Token regeneration on every login.
🔑
Bcrypt Passwords
All passwords hashed with bcrypt (cost=12). No plaintext storage. Secure password reset via email token.
🛡
Session Security
Secure session lifetime (1hr), regeneration every 5min, HttpOnly/SameSite cookies, session fixation prevention.
🚫
Login Lockout
5 failed attempts = 300-second lockout. IP-tracked. Rate limiting on API (120 req/min per token).
📋
Audit Logging
All API calls logged to logs/api_access.log — token ID, IP, method, resource, timestamp.
🔒
HTTPS Enforcement
Production HTTPS enforcement in apimgmt.php. Security headers: X-Frame-Options, X-Content-Type-Options.
Input Sanitization
All inputs sanitized via sanitize(). MIME type validation on file uploads. is_safe_id() for path traversal prevention.
🎯
Role-Based Access
5-tier role system. Supervisor panel restricted to jvgears/mayurvelani + passkey. Viewer role never expires.
Explore the 7 ERP Modules
Each module is documented in detail with actual screenshots, feature lists, and live data examples.