Run your whole business on one system.
BuMP is an integrated CRM + ERP built for Canadian companies, 1 to 100 staff, ready to run on one connected platform instead of separate tools.
One platform for sales pipeline, delivery work, invoicing, vendors, inventory, and tax. Canadian compliance engineered in. AI built into the foundation from day one. We set it up, configure it for your business, and train your team — no integrator middlemen.
Four reasons BuMP exists
Canadian by default. Bundled by design. Hybrid by data model. AI from day one.
Built for Canada
GST / PST / HST / QST place-of-supply rules day one. CRA-aligned. EFT via CPA-005. Bilingual EN / Québec French — system strings, customer documents, tenant content. Quebec French engineered in from the start. PIPEDA + Law 25 compliant by design.
Bundled with implementation
One bill for software plus setup. Prendergast Digital configures your tax setup, maps your chart of accounts, migrates your customer list, and trains your team directly. AI-paired custom development ships customizations in weeks.
Services + product hybrid
Your consulting arm with billable engagements and your wholesale arm with stock sit in the same instance. One Account record covers them both. Equal-citizen support for services delivery and product operations from day one.
AI from day one
AI built into the foundation, not the feature list. Structured APIs for agents, eventful by design, extensible schema, provenance in every record. Designed for a world where AI agents work alongside your team from the start.
AI in the fabric
Built for AI agents from the foundation.
AI agents are becoming part of how businesses run — reading data, writing records, reacting to events, drafting documents. BuMP was designed in 2026 with that working model in mind. Four architectural decisions make agents first-class participants in your operations alongside your team.
Structured surface for agents
Every entity has a REST endpoint and an OpenAPI spec. Agents read, query, and write through structured APIs. Auth via service tokens, scoped per tenant per role, using the same RBAC system humans use.
Eventful by design
HMAC-signed webhooks fire on every state change. AI agents react to deal stages moving, invoices issued, payments received, engagements completing — in real time, no polling required.
Schema you can extend
Custom fields runtime and workflow engine let agents add fields, define stages, and set hooks — without a developer pushing code. Tenant-scoped, governed, audited.
Provenance built in
Every action — human or AI — captured in the immutable audit log with actor, timestamp, and diff. You always know who did what. Including which agent.
Enterprise architecture, SMB operating model
The structural things, done right from day one.
The big platforms — Salesforce, NetSuite, SAP — earn their cost by getting the structural things right: multi-tenancy, immutable audit, double-entry ledger integrity, RBAC, encryption, restore drills. BuMP keeps those structural foundations and removes the enterprise overhead. The result: enterprise-grade infrastructure at SMB scale and price.
SOC 2 controls day 1
Auth + MFA + role-based access + immutable audit log + signed deployments + restore drills. Controls wired now; formal certification in Phase 4+.
Multi-tenant at the DB layer
Row-level security at the database layer, not application filtering. Strict tenant isolation built in. Optional dedicated database per enterprise tenant.
Immutable double-entry ledger
Editable documents on top of a ledger you can rely on. Accountant-grade integrity, drill-down sub-ledgers. Lands with Phase 3.
Polymorphic audit log
Trigger-enforced, immutable. Every INSERT / UPDATE / DELETE captured with actor + timestamp + diff. Defense in depth — the audit captures every change regardless of source.
Privacy by design
PIPEDA + Quebec Law 25 compliant. Per-tenant encryption keys. Field-level redaction lists. Customer-preferred-locale resolution for documents.
Hardened auth foundation
argon2id password hashing with per-app pepper (NIST 800-63B). MFA TOTP. Account lockout. HIBP password-breach checks. New-device email alerts.
Disaster recovery
Point-in-time recovery + daily encrypted backups + per-tenant export + quarterly restore drill. RTO 4h / RPO 5min.
3-environment CI/CD
Dev / test / prod. Manual-gated migrations. Reversible-down migrations mandatory. Predictable, traceable production changes.
Signed integrations
HMAC-SHA256 signed webhooks in and out. Idempotency keys. Retry + DLQ + admin alerts. Delivery guarantees you can rely on.
Signed deliverability
Domain-verified transactional email with DKIM signing. Bounce and complaint tracking. Per-environment server isolation so test mail can never reach a customer inbox.
Structured observability
Centralized error monitoring + structured JSON logs + OpenTelemetry traces per-environment. Incidents get a tenant, a user, a request, and a stack — not a needle in a haystack.
Encrypted object storage
Per-environment S3-compatible buckets with server-side encryption at rest. File attachments and document exports never leave Canadian-aware infrastructure unencrypted.
End-to-end coverage
One system, lead through cash and beyond.
One data model, one tenant boundary, one audit log, one ledger — across every capability your business needs. Each capability shares the same foundation: audit, RBAC, tax engine, currency + FX, custom fields, workflow engine, and the AI-agent interface.
Capture
- Accounts
- Contacts
- Opportunities
- Engagements
- Addresses
Sell
- Items
- Quotes
- Orders
- Card checkout
Bill
- Invoices
- Payments in
- Credits + Refunds
- Canadian tax engine
Perform
- Engagement delivery
- Time tracking
- Project milestones
- Order fulfillment
- Shipments
Stock
- Materials
- Locations
- Destinations
Pay
- Purchases
- Receiving
- Payments out
- EFT / CPA-005
Staff
- Wagepoint
- ADP
- Knit
- (via webhook + API)
Who it's for
Canadian companies, 1 to 100 staff, ready for one connected system.
Services firms
Consulting, professional services, agencies, implementation shops. Engagement-based work — T&M, fixed-fee, retainer, managed services. Time tracking, invoice from delivered work, profitability by engagement.
Wholesale + light manufacturing
Stock tied to invoicing, receipts and shipments tracked, vendor AP, ITC paperwork for input tax credits. Sized for operations that have outgrown spreadsheets and want one integrated view.
Project-based businesses
AEC firms, contractors, specialty trades. Anyone running project P&L with milestones, sub-contractors, and progress billing. Engagement entity built for this shape from day one.
Quebec or bilingual operations? Across all three segments, Law 25 compliance, French-first customer documents, QST handling, and PIPEDA-aware data flows are engineered in. Not its own segment — its own strength across every segment.
Live with design partners today.
Design partners get six months free, then 50% off the following six months, then 25% off through year two. If you're a Canadian SMB looking at this and recognizing your shape of business, we'd love to talk.
Pick the closest match — Morley reads every email personally.