How Your Information Is Protected

Who Is Responsible For Your Data

Your organization's administrator (the licensee admin) decides who gets an account, what is recorded and how long it is kept. That administrator is the data controller for everything entered in this app. Vantage Point Software Solutions provides and hosts the software.

A Secure Connection, Always

The app runs over HTTPS only. Any request to the plain http address is sent to the secure address, and browsers are told never to use an insecure connection (HSTS for two years, with preload).
The site is tested against Qualys SSL Labs and securityheaders.com, and the target is an A+ rating on both at every release.
Every page sends security headers. A strict Content Security Policy means the app only loads its own files. Other sites cannot show the app inside a frame. Browsers are told not to guess file types. Referrer and resource sharing are limited to the app itself. Microphone and location are switched off, and the camera is only used to scan labels.

Signing In

Every sign-in starts its own session in that browser. When you sign out, the server ends that session, so a copied cookie stops working. Your other devices stay signed in.
Changing your password, resetting it, being suspended or having your role changed signs that account out on every device.
After 5 failed attempts the account is paused for five minutes. A network address with 20 failed attempts is paused too.
An administrator account that still has the installation's default password cannot sign in.
Administrators get an email when: someone fails to sign in 5 times within an hour, a new administrator is added, a user is made an administrator, a backup is downloaded, or the database is restored.

Backups And Settings

Backup downloads (the database copy and the CSV bundle) are zip files encrypted with AES-256 and locked with the backup password set in Settings > Backup. They open in 7-Zip, WinZip and Windows 11 File Explorer.
The email (SMTP) password is stored encrypted (AES-256-GCM) with a key that exists only on the server.

Error Records

When something goes wrong, the app saves a short error record with a reference number you can quote. Before it is saved, email addresses, phone numbers, user names and link tokens are removed. Record numbers in the page address are replaced, and the user is recorded only by role.

Activity Log

Sign-ins, failed sign-ins, sign-outs, password resets, user changes, backups and restores go into an activity log that administrators can review.

No Outside Services, No Data Sold

The app loads no outside scripts, fonts, trackers or advertising. Your data is never sold or shared for marketing.

What The Licensing Hub Receives

The app regularly checks its licence with the Vantage Point licensing hub. Each check-in sends exactly this:

the licence key, the app's web address, the software version, a one-time check number and the current time
counts of active properties, rooms, filters and users
for each active user: name, email address, role (administrator, technician or client) and last sign-in time
up to 50 new error records (reference, time, page address with record numbers removed, status, cleaned message, error fingerprint, repeat count, build), with personal details removed

No property, room, filter or client records are sent.