Security & cloud service
Review how WeldTrace protects connections, identities, application data and files across its cloud-service architecture.
Published controls
WeldTrace uses SSL/TLS server authentication and encryption to protect information transmitted between the browser and the service.
Each user has a unique username and password. Passwords are hashed and salted, with password reset controls available to the user.
User sign-in events are recorded with the originating IP address to support security monitoring and investigation.
The hosted WeldTrace service uses DigitalOcean infrastructure in United States data centres with firewall and platform security controls.
Application data is stored in MongoDB Atlas in United States data centres, replicated to a secondary database and backed up.
Files are stored in Amazon cloud infrastructure and transferred using secure protocols. Authorised third parties support monitoring and communications.
Cloud delivery
WeldTrace is designed for access through a supported web browser, with service operation and updates managed centrally.
Use WeldTrace through Google Chrome on supported Windows or Mac computers from locations with internet access.
Review technical requirements →Automatic backups and redundant service infrastructure support operational continuity.
Request service details →Software updates and remote support are included, without local application-server maintenance.
Discuss onboarding →Procurement review
The public policy provides a starting point. Detailed reviews can then focus on the controls, evidence and responsibility boundaries relevant to your deployment.
Architecture and data-flow overview.
Identity, access and auditability statement.
Backup, recovery and operational continuity summary.
Data residency, service-provider and security contact details.
Published security information
