Privacy Policy
Your data security is the cornerstone of our accounts payable recovery operations. This policy outlines how ERM Solutions handles sensitive financial records with institutional-grade precision.
Last Updated: May 26, 2026
ERM Solutions ("we," "us," or "our") is committed to protecting the privacy and security of the financial information entrusted to us. This Privacy Policy describes how we collect, use, and safeguard the personal and financial data of our clients and partners in the course of providing accounts payable recovery and efficiency services.
This policy is governed by the laws of the State of Israel, in particular the Privacy Protection Law, 5741-1981 and the Privacy Protection (Information Security) Regulations, 5777-2017, including the amendments introduced by Amendment No. 13 to the Privacy Protection Law. Where our clients or their data subjects are located outside Israel, we apply equivalent standards under the EU General Data Protection Regulation (GDPR) and, where applicable, the California Consumer Privacy Act (CCPA).
1. Data Collection
We collect information that is necessary to provide high-end financial consultancy and recovery services. This includes:
- check_circle Client Business Information: Tax ID numbers, corporate structure, and primary contact details for financial executives.
- check_circle Financial Records: Transactional data, accounts payable ledgers, vendor information, and historical invoice records required for recovery audits.
- check_circle System Logs: Digital breadcrumbs including IP addresses, browser types, and access timestamps for security monitoring and fraud prevention.
2. Data Usage
Your data is utilized exclusively for the following professional purposes:
Service Execution
Performing deep-dive audits to identify overpayments, duplicate billings, and unclaimed credits within your AP systems.
Risk Mitigation
Validating vendor data to prevent fraudulent activities and ensuring compliance with federal financial regulations.
3. Security Protocols
Encryption
TLS 1.3 for all data in transit to keep your information secure end-to-end.
Access Control
Multi-factor authentication and strict 'Principle of Least Privilege' (PoLP) protocols.
Confidentiality
All client data is handled under strict confidentiality agreements and never shared with third parties.
4. Data Retention
We retain personal and financial data only for as long as it is necessary to fulfil the purposes set out in this Privacy Policy or as required by applicable Israeli law, whichever is longer:
- Engagement data (audit files, ledger exports, vendor information) is retained for the duration of the engagement and, upon completion, is either returned to the client or permanently deleted within 30 days, in accordance with the engagement letter or NDA.
- Contact and inquiry information submitted through this website is retained for up to 24 months from the last interaction, unless you ask us to delete it sooner.
- Accounting and tax records are retained for at least 7 years, as required under Israeli bookkeeping and tax regulations.
- System security logs are retained for up to 24 months for fraud prevention and incident response purposes.
5. Cookies & Similar Technologies
Our website uses a small number of cookies and similar local-storage technologies to make the site work and to understand how visitors interact with it. We do not sell or share personal information collected through cookies with third parties for advertising purposes.
Essential cookies
Strictly necessary for the site to function — for example, to remember your cookie consent choice and to keep the contact form protected against automated abuse. These cannot be turned off.
Analytics cookies (optional)
Help us understand which pages are visited and how users navigate the site, so we can improve content and performance. These are only set after you grant consent through the cookie banner.
You can change your consent at any time by clearing your browser's storage for this site, or by contacting our privacy team using the details below.
6. Your Legal Rights
Under Israeli law and applicable international regimes (GDPR, CCPA), you have several rights regarding your personal information. You may exercise any of these rights free of charge by contacting our privacy team at Tamar@ermsolutions.co.il:
7. Privacy Contact
For any question regarding this Privacy Policy, to exercise your rights, or to file a complaint about how your data is handled, please contact our designated privacy point of contact:
Name
Tamar Eldan — Founder & CEO
Phone
Response time
Within 30 days, as required under the Privacy Protection Law
If you believe that your privacy rights have been violated and your concern has not been resolved by us, you may also file a complaint with the Privacy Protection Authority of Israel (the Israeli regulator under the Ministry of Justice).
Questions about how we handle your data?
We're happy to walk you through exactly how your information is used and protected.