Every system release includes ALL the source code required to build the system. The libraries that the system is built on are all open source mostly Apache Licence, BSD or LGPL ( not GPL or Affero GPL)
http://en.wikipedia.org/wiki/Comparison_of_free_and_open-source_software_licenses
stSoftware's award winning patented multi-layered database structure separates generic and custom client code and data into different database layers. The code and data held in the Client App Layer and the Client Data Layer are the intellectual property (IP) of the client. The code and data held in the st Engine/App Layers are the IP of stSoftware.
The multi-layered database structure provides more than a designation of IP, they are integral to customising a generic solution which is rapid and affordable. Generic functionality can be easily customised rather than having to develop a custom system from scratch.
Specific client requests are normally broken down and implemented as generic features and then customized to the clients' requirements unless otherwise requested. Generic features are maintained/enhanced by stSoftware on going.
The client owns the IP for all code and data that is located in their Client App Layer and Client Data Layer for all stSoftware solutions.
stSoftware's Engine/App Layers
Client's App Layer
Client's Data Layer(s)
Note: The structure can support multiple Client Database Layers, this is an additional benefit of the layering that enables the sharing of system functionality. For example in a franchise arrangement each franchisee has access to a discreet and totally private data layer and also has access to the shared Group App Layer and Group Data Layer
Industry standard best practice for passwords for both the web server and Linux machines. Site designers do not have direct access to the underlying Linux server, the raw database or files. All changes are done within sandbox of the system.
All databases are backed up nightly.
All client documents are backed up nightly and consistency check of the raw file checksum is performed.
The backups are kept for a week on site.
The machines themselves are backed up as a whole to an off site secure backup location. A full or partial restore of the machine can be done from the off site recovery centre.
The standard system is Linux will all ports closed except HTTP, HTTPS and SSH.
SSH is configured to block IP addresses after a series of failed log in requests. All SSH requests that are from unknown locations or from foreign countries are blocked by default.
All raw files which are stored separately to the database itself are sent to both the main site and the disaster recovery site when the files are uploaded. Each version of a file is kept and never modified ( new version created ). When a file is uploaded a file checksum of the raw file is performed and stored in the database, the file is then encrypted and the key is stored in the database. The compressed/encrypted resulting file is sent to the redundant file servers for permanent storage.
The hosting provider has a 2 hour hardware replacement,
We use Australian web Hosting with 99.99% up time guarantee for non scheduled downtimes
The standard hosting package comes with a 2 hour hardware replacement.
http://www.digitalpacific.com.au/hosting/dedicated-hosting/dedicated-servers/
stSoftware privacy and security policies are based on Australian government regulations. All data and files of Australian clients are stored on Australian based servers.
PRIVACY ACT 1988 - SECT 13D Overseas act required by foreign law
When implementing new processes which are likely to result in a high risk, stSoftware shall before the processing, assess the impact of the envisaged processing operations of the protection of personal data in accordance with Australian Privacy Principles. This assessment is to ensure the safekeeping of the data subjects personal information. The assessment will contain
When necessary, stSoftware shall carry out reviews to assess if the processing is in accordance with the data protection impact assessment laid down by the APP when there is any chance of risk along with undertaking its Security checks.
stSoftware takes pride in its security policies and ensures the highest security levels for our clients' data. In the unlikely case of a data breach, stSoftware will follow the Australian government guidance to notify the data breach.
The notification form will contain
stSoftware collects personal information for billing, sales and support. stSoftware meets or exceeds principles covered in the Australian Privacy Principles Privacy Act 1988.
Your privacy is vital to us at stSoftware, and we will abide by or exceed all guidelines laid out by the APP (Australian Privacy principle) 5.2 and Principle 5.1.
stSoftware follows the principles and processes of the GPG2013 Business Continuity Management Lifecycle (BCM Lifecycle) model as the basis for business continuity management. The model is shown below:
The model identifies the six stages of activity, and repeat, with the overall aim of improving corporate resilience.
stSoftware's complaints management policy is intended to ensure that we handle complaints fairly, efficiently and effectively.
We are committed to seeking and receiving feedback and complaints about our services, systems, practices, procedures, products and complaint handling.
Any concerns raised in feedback or complaints will be dealt with within a reasonable time frame.
People making complaints will be:
stSoftware expects staff at all levels to be committed to fair, effective and efficient complaint handling and promotes a culture that values complaints and their effective resolution.
Our staff are empowered to resolve complaints promptly and with as little formality as possible. Where possible, complaints will be resolved at first contact with stSoftware.
Complaints can be made anonymously or with details, through the below channels;
Email support@stsoftware.com.au
Ph 1300 78 73 78
Int +1 917 267 7607
stSoftware's complaint management system ensures a consistent approach to our complaints management process.
stSoftware is committed to improving the effectiveness and efficiency of our complaint management system. To this end, we analyse learnings and engage in continuous improvement.
When possible we will inform people who make complaints to or about us about any internal or external review options available to them (including any relevant Ombudsman or oversight bodies).
