How secure is Abtrac in the cloud?

In short, Abtrac's online job management software is extremely secure!

We understand that embracing any new system can be a big decision.

The cloud is changing the way we consume, share, and use digital information because it makes access to information and computing power easier, faster, more affordable, and under the right circumstances like Abtrac, more secure.

Abtrac Online standard practise security measure

 The entire system, web site and database, is hosted in the Microsoft Azure environment, with all their standard security measures. 

In addition we have applied some of our own.

All network communications to and from Abtrac Online job management software are encrypted through the enforced use of the secure https (SSL) protocol.

User credentials are securely stored and validated using Microsoft's Membership 'module'. This is an industry standard development component that has been well tested and widely implemented. No page nor report can be accessed other than by a user who has legitimately logged in. Anyone trying any ‘back door’ entrance to any part of Abtrac will be diverted to the log in screen if they have not already had their credentials verified. In addition, the Abtrac system itself implements its own security layer to enable clients to control staff access to pages and data in ‘user groups’ which can have permissions established by your Abtrac administrator. All users who log into Abtrac have to belong to one such group. Access to each individual Abtrac report is similarly controlled by administrators in your office.

For added security our website strictly implements a design pattern to ensure that all publically exposed database requests can only ever return a dataset for a single client. This is to limit the ability of a malicious user being able to retrieve data en-masse from the system.

We have also built protection into Abtrac to prevent malicious intrusion from web robots. We automatically lock out any login if it fails to correctly combine user name and password within five attempts. And of course passwords are compliant with industry standards requiring a minimum number of characters and character types.

Full access to the database, required for our support, maintenance and development of the system, is restricted to Abtrac's own secure office network. We maintain updated anti-virus and firewall software and also limit the use of remote connections to our secure network.

Abtrac Online uses the Microsoft SQL Server Azure database. SQL Azure is an enterprise data storage solution. The version of SQL Azure we use has built-in business continuity features including point-in-time recovery and geo-redundancy. Furthermore, we independently have an hourly incremental backup and at least one full database backup daily which is stored in another regional data centre. We maintain a 30 day rolling backup.


Abtrac's Two Factor Authentication

As recommended by more and more industry leaders we also recommend that you turn on Two Factor Authentication (not only for Abtrac but anything where you store sensitive information). 

Abtrac's Two Factor Authentication ensures your users not only have their own Abtrac secured password but they also have to have access to the email account assigned to their Abtrac login. Before they can gain access to Abtrac they will have to input a security code that is sent to their email.


Abtrac's password settings

Not only do your users have to have a secured password set with a minimum length with certain characters used, but you can also force users to change passwords every 31 days.



Security in the future

As technology is continuously evolving, we routinely review our security measures to ensure we’re protecting your on line data in a solid security foundation that spans across all platforms.


Join the journey

When your information is in the cloud, you can access it from anywhere you connect online. You don’t need to carry it with you on a computer nor build large data centres to store it. And you don’t need to manually update your software if it is provided to you through a cloud-based service.

If you are well into evaluating Abtrac and you have any further queries or concerns about security if committing to our cloud job management software, give us a call or drop us an email.


 Get in touch