This page is written for a head of IT. Each item carries one of three labels. "In the product today" means it is code in the app itself. "Built, switched on at deployment" means it is part of how the system is hosted and is switched on when a customer's system is deployed. "Planned" means it has not been done. None of the labels means a service is running for customers.
| Area | What it is | Status |
|---|---|---|
| Separation between companies | Each company's data is kept apart by row-level security, forced in the database itself. | In the product today |
| Sign-in | Sign in with Microsoft or Google. No passwords are stored. | In the product today |
| Roles | Four roles: admin, office, accounts and warehouse. | In the product today |
| Change history | A record of who changed what, including the reason when one was required. | In the product today |
| Data ownership | The data belongs to the customer, with a full export on request. | In the product today |
| Wall board access | Each wall board screen has its own read-only key, which can be revoked. | In the product today |
| Hosting | Hosted on AWS in London. | Built, switched on at deployment |
| Encryption | Encrypted in storage and in transit. | Built, switched on at deployment |
| Backups | Continuous backups, with a restore test every week. | Built, switched on at deployment |
| Infrastructure assurance | Built on ISO 27001 / SOC 2-certified infrastructure, with controls aligned to ISO 27001. | Built, switched on at deployment |
| Penetration test | An independent penetration test, before the first customer goes live. | Planned |
| Cyber Essentials | Cyber Essentials certification, before the first customer goes live. | Planned |
The certification wording above is deliberate. The infrastructure is certified. VSE is not claiming to be certified itself, and the controls are aligned to ISO 27001, not audited against it.
Questions from your IT team are welcome through the enquiry form.
Where this shows on screen
Keep reading
Head of IT
The three questions a head of IT asks.
People, roles and change history
Roles and the change history.
Moving from your current system
How data comes across, read-only.
Start with the two discovery days
We sit with your office and warehouse, read your data and come back with a fixed scope and price. Or ask for a conversation first.