CSA STAR Registry
Security, Trust, Assurance, and Risk Registry
Listings for JPTech S.A.S. de C.V. (FacturaSV & ComercioSV)
JPTech S.A.S. de C.V. is a cloud software provider headquartered in San Salvador, El Salvador, operating two core platforms:
- FacturaSV (https://facturasv.com): Multi-tenant B2B SaaS for Electronic Tax Invoicing (DTE), Point of Sale (POS), inventory, and accounting compliance integrated with El Salvador's Ministry of Finance.
- ComercioSV (https://comerciosv.com): Omnichannel B2C e-commerce marketplace and delivery platform for Salvadoran merchants.
- Cloud & Multi-Tenant Isolation: Hosted on Google Cloud / Firebase (us-central1) with strict tenant-scoped access controls, Firebase App Check attestation, TLS 1.2+/1.3 in transit, and AES-256 encryption at rest.
- Zero Cardholder Data Storage: Card payments are fully outsourced via HTTPS redirection to PCI DSS-validated gateways (Wompi / Banco Agrícola).
- Responsible AI: AI-assisted business insights enforce PII masking, strict human-in-the-loop oversight, and zero model training on customer data.
FacturaSV & ComercioSV Cloud Platform
FacturaSV & ComercioSV Cloud Platform is a multi-tenant SaaS suite hosted on Google Cloud and Firebase (us-central1) across Web, Andr...
Listed Since: 2026-11-04
CAIQ
Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).