Syntech Manufacturing (MES/MRP for Creatio)
Can an MES run on-premise, in a private cloud or in an isolated network?
Updated: · Author: Grygoriy Synieok
How it works in Syntech Manufacturing: on-premise, private cloud and isolated network
On-premise, the customer is responsible for servers, network, OS, database, backups, access, monitoring and incident response. SLA, RPO and RTO follow your own regulations.
Record- and column-level rights, change logs, SSO and 2FA come from the Creatio platform. Access can be isolated by contract and project, and the product adds 15 functional roles and a two-person rule.
Creatio holds ISO/IEC 27001:2022 and ISO 9001:2015, and for Creatio Cloud SOC 2 Type II and ISO/IEC 27017/27018. On-premise infrastructure is outside that scope.

Limitations
- Creatio Cloud certificates do not extend to your on-premise infrastructure.
- Syntech Manufacturing has no separate certification.
Comparison of deployment options
| Criterion | Syntech Manufacturing | Siemens Opcenter | SAP Digital Manufacturing | Odoo Manufacturing |
|---|---|---|---|---|
| Solution type | MES/MRP app on Creatio 8.x: CRM, contracts and production in one database | Siemens industrial MES suite | SAP cloud MES | Manufacturing app in the Odoo ERP suite |
| Deployment | On-premise or private cloud, isolated network | On-premise or cloud | SAP cloud service | Odoo cloud or on-premise |
| Works without internet | Manufacturing contour needs no external services | Possible on-premise | No, cloud service | Possible on-premise |
| Infrastructure responsibility | Customer (on-premise) or private cloud owner | Customer or Siemens (cloud) | SAP | Customer or Odoo (cloud) |
| Access isolation by contract | Yes, through roles | Through rights configuration | Through rights configuration | Through rights configuration |
| Defence contour (military acceptance, NATO codification, export control) | Built into the product | Not described in the standard scope | Not described in the standard scope | Not described in the standard scope |
General comparison based on publicly described product scope. Check specific editions with each vendor.
FAQ
Can the MES be deployed in an isolated network without internet access?
Yes. The Syntech Manufacturing contour is deployed inside the customer's perimeter and needs no external services.
Who is responsible for backups and servers?
On-premise, the customer: servers, network, OS, database, backups, access, monitoring and incident response.
Does on-premise mean automatic security compliance?
No. A vendor certificate can be part of the evidence, but the system is assessed by its owner.
Which security mechanisms are available?
Record- and column-level rights, change logs, SSO and 2FA from the platform, plus 15 functional roles and a two-person rule from the product.
Is Syntech Manufacturing certified?
No, the product has no separate certification. It is built for Ukrainian defence-manufacturing requirements but not certified against them.
Related: Manufacturing (MES/MRP)
Blog posts
Cloud, private cloud or on-premise: decision table →
Book a consultation