HTTPS, permanently
Your address stays encrypted. Certificates are issued, renewed and replaced ahead of expiry, so nobody on your side has to diary a date once a year.
Security and SSL
Security you do not have to keep on a checklist
Most breaches are not clever. They are a patch that was never applied, an account that was never closed, and a certificate nobody renewed. Managed Cloud makes all three somebody's job, and that somebody is us.
In short
- Patched by us
- Isolated database
- HTTPS permanently
- Access reviewed
Security hardening and SSL
Patching, access rules, account protections and certificates are applied and reviewed by us, rather than left as a checklist somebody is meant to remember.
Patches applied for you
Security updates to the platform and to everything underneath it are applied as part of the service, on a schedule that does not interrupt your trading day.
Your own isolated database
Every Stockovaa business runs in its own database. Your records are not sharing a table with another company's, which is a design decision rather than a setting.
Access that is actually reviewed
Administrative access is limited, named and revisited. When a member of your team leaves, closing their access is a request you can make and see completed.
Certificates on your own domain
If your staff sign in at your own web address, that address gets its own valid certificate. Custom domains are not a second-class case.
Somebody watching for the odd
Failed sign-in floods and unusual patterns raise an alert with a person. A log nobody reads protects nobody.
In scope
What hardening means here
Specific work, done on your account, not a badge on a web page.
- Platform and dependency security updates applied on an agreed window
- Transport encryption enforced, with certificates renewed before they lapse
- Database isolation per business, so one customer cannot reach another
- Administrative access limited to named people and reviewed on a cycle
- Password and session protections configured to sensible defaults, not left to chance
- Alerting on failed authentication patterns and unusual activity
How security work reaches your account
The point of a managed service is that this happens whether or not you asked.
We track what needs applying
New advisories affecting the platform or anything it runs on are assessed against your configuration, not applied blind.
We schedule around your trading
Routine work goes in an agreed window. Anything urgent is handled immediately and you are told what happened and why.
We confirm and record it
The security page in your portal shows current certificate status and when hardening was last reviewed, so you have an answer when an auditor asks.
The point of it
What your team never has to do
- Track security advisories for software they did not write
- Renew a certificate at eleven at night because the site went red
- Work out which of eleven former staff accounts are still open
- Prove to a client that their data is not in a shared table
Asked and answered
If yours is not here, ask us directly. We would rather have the conversation than have you guess.
No, and be wary of anyone who does. What we commit to is the work: patches applied, access controlled, certificates valid, alerts going to a person, and a straight account of anything that happens on your account.
Yes. Every business runs in its own database rather than a shared one with a customer column. That has been true of the platform since the beginning and it is not a paid extra.
You disable them in Stockovaa yourself, and if you need administrative access revoked or an account fully removed you raise it with us and we confirm when it is done.
Yes. Ask us and we will put together what your buyer needs, including the terms in your service level agreement and our data processing terms.
Managed Cloud does five other things too
Each one works the same way. Our team does the work, and your team gets on with trading.
Automated backups and restore
Copies of your business data are taken on a schedule and kept away from the system they came from. When you need one back, you ask us and we do the restore.
About backups and restoreMonitoring and uptime
Availability is checked continuously. If something stops responding, an alert reaches a person who is already working on it before your first customer of the day notices.
About monitoring and uptimeSoftware updates and versions
Every new Stockovaa release is applied for you, on a window we agree, after it has been checked against your configuration. Nothing to download, nothing to schedule around month end.
About updates and versionsDomain management and DNS
Your staff sign in at your own web address rather than a generic one. We connect it, verify it, issue the certificate, and keep the records right.
About domains and dnsWhite label branding
Your logo, your colours and your business details on the screens your staff use every day and on the invoices and receipts your customers take away.
About branding and white labelSee the whole service
This is one part of Managed Cloud. The rest of it works the same way: our team does the work, and your team gets on with trading.