How Paprel ships — two independent choices, whose brand fronts the product and where it runs — with shared hosting and Paprel-visible delivery as the defaults, and what stays identical whichever you pick.
How Paprel is layered — company-per-tenant isolation enforced at the data layer, an append-only double-entry ledger that rejects unbalanced postings, a workflow layer that compiles documents into journals, and reports derived live from the same rows.
How Paprel's write path stays safe under retries — idempotent writes, balanced-or-rejected validation before the ledger, signed webhook delivery, and recovery from authoritative accounting data.