Your QA record, kept in your region and under your control.
Hosted on Microsoft Azure, with a private database for every customer.
Where your data lives
CivilPro runs on Microsoft Azure, in Australian data centres by default. Customers outside Australia can nominate a local Azure region.
Hosted in Australia, or in your region
Microsoft Azure, Australia East (Sydney) by default. Your data, including backups, stays in Australia unless you nominate another Azure region – in the UK, for example.
A database of your own
Single-tenant by design. Each customer has a private database and its own application instance – no shared database, and no customer data mixed with another's.
A fully managed platform
Managed Azure services, with no on-premises servers. Microsoft runs the data centres and their physical security, and holds ISO 27001 and SOC 2 Type II certification for them.
Who can see and sign what
Access is decided by role, not by who happens to have the link.
Access by role
- Roles set per user, so each person sees and does only what their role allows
- Inspectors, testing subcontractors and your Client sign in with their own accounts
- Every approval carries a name and a timestamp
- Accounts can be disabled the day someone leaves the project
Sign in your way
- Single sign-on with Microsoft, Google or SAML 2.0
- Multi-factor authentication
- Every login attempt logged, and repeated failures limited
- Database connections limited to approved IP addresses
Protected at every step
Encrypted in transit and at rest
Connections to the application and the database are encrypted, and data is encrypted at rest on Azure, including backups.
Files kept separate
Documents and photos sit in Azure Blob Storage, apart from the application, and are served through short-lived access links to signed-in users only.
Protection at the front door
Traffic passes through Azure Front Door with a web application firewall and DDoS protection before it reaches CivilPro.
Logged and monitored
Centralised logging and alerting, with continuous security assessment of the Azure environment through Microsoft Defender for Cloud.
Ready for your IT review
Councils and government agencies put CivilPro through vendor security assessments. Here is what helps yours move quickly. Detail on how we develop, release and run CivilPro is available on request.
Running a vendor security review?
Send us your questionnaire or your list of questions, and we will come back with answers in writing.
