2 waitingClient approval
A new browser, tablet or integration waits for an admin’s approval, with its IP address and location in view.
• Security & Trust
Trust is part of
the architecture.
How your records are protected, how access is governed, and how evidence stays verifiable across the Digital Manufacturing Platform.
Five layers of defenceInternet → encrypted storage
- 01EdgeDDoS protectionWeb application firewall
- 02AccessMFAClient approvalNetwork geo-fencingRole-based access
- 03ApplicationRule checks on every actionRe-authenticated approvalsTenant isolation
- 04RecordsAppend-only audit trailHash-chained entriesSigned PDFs
- 05StorageAES-256A key per tenantEncrypted backupsPoint-in-time recovery
Architecture
Enterprise grade security.Built into the platform.
Every customer runs in its own tenant, inside a private network, with its data encrypted from end to end.
DDoS protection
Harmful traffic is filtered at the edge, with DDoS protection and a web application firewall, before it reaches the platform.
Multi-tenancy
Every company is its own tenant, with its own database, kept apart from every other customer.
Encrypted at rest and in transit
Data is encrypted on its way in and out, and at rest with AES-256.
Delegated administration
Your admins manage people, roles, devices and networks. Factro staff have no account in your workspace.
Data & Access Control
Only your people get in.Nobody at Factro can.
Your records belong to your company. Every account, device and network is checked before anyone reaches one.
MFA
Every account signs in with a second factor.
Role-based access
People see and do only what their role allows.
Signed approvals
Approvals need a fresh sign-in, with the signer’s meaning and time.
Session expiry
Idle sessions end on their own.
Network-based geo-fencing
Sign-ins are limited to the networks and regions you approve. Anywhere else is refused, even with the right password.
An audit trail that holds
Every change and signature is recorded with who, when and why. No one can switch off, edit or backdate it, administrators included.
Backups
Three copies,always a way back.
Three layers of encrypted backup cover a slip from a few minutes ago through to losing a whole data centre.
01
Every change, as it happens
Data is copied continuously, so it can be brought back to a moment just before something went wrong.
Covers you whenA wrong entry or a bad import minutes ago
02
A full copy every day
Once a day, everything is backed up and stored away from the live system.
Covers you whenA problem is found days later
03
A copy in another region
Backups are also kept in a second region, far from the first.
Covers you whenA whole data centre goes down
DevOps
Watched around the clock.Protected at the edge.
A 99% uptime target
The platform is monitored against it around the clock.
Protected at the edge
DDoS protection and a web application firewall filter harmful traffic before it reaches Factro.
Recoverable by design
Continuous, daily and cross-region backups mean a failure does not become data loss.
Deployment
Choose how Factrois deployed.
Most plants run on the standard service. Dedicated and on-premises setups are available when your policy asks for them.
Standard
Shared multi-tenant service
- Hosting
- Factro-hosted with a cloud provider
- Database
- Isolated per tenant
- Application layer
- Shared, tenant-isolated
- Storage and network
- Shared, tenant-isolated
- Encryption at rest
- AES-256, key per tenant
When it fitsMost plants
Dedicated
Your own infrastructure
- Hosting
- A dedicated cloud provider environment
- Database
- Your own
- Application layer
- Your own
- Storage and network
- Your own
- Encryption at rest
- AES-256, key per tenant
When it fitsYour policy asks for separation
On-premises
Inside your network
- Hosting
- Your data centre
- Database
- Your own
- Application layer
- Your own
- Storage and network
- Your own
- Encryption at rest
- AES-256
When it fitsYour policy asks for on-site
Make it your workflow
Bring your security
questionnaire.
We will walk through deployment, access, recovery and evidence with your IT and quality teams, and answer it line by line.