As a logistics company, you want the goods you transport to be delivered reliably and arrive safely at their destination. You do everything possible to prevent shipments from being lost or cargo from arriving damaged. But how is the security and safety of your logistics software ensured?
This aspect of your business operations must also be well-managed. Just as you don’t want to lose a physical shipment, we ensure that your data is handled securely. It’s not just your transport that needs to be safe, but also the software you rely on. At Adaption, the security of our logistics software systems is a top priority. We achieve this in various ways, including:
All of our software is available in the cloud. As a result, all the software is accessible by an internet browser. To safely work within a cloud-based environment, a secured connection is needed. Adaption software runs on an encrypted connection. In other words, an SSL certificate. GlobalSign publishes these certificates. They are one of the most reliable publishers of SSL certificates.
Companies like Ford, Toyota, Netflix, Microsoft and BBS use these SSL certificates. Feel free to take a look at the website of SSL labs.
Another safety measure we’ve taken is the implementation of APEX-SERT into our development and testing process. This tool evaluates applications on several security risks and identifies any vulnerabilities. APEX-SERT is fully integrated into the application builder, the developing software we use to develop our software. Many companies are using APEX-SERT after developing software to evaluate the software. We use it differently. APEX-SERT is a part of our developing process, and our APEX-SERT checks every environment on possible threats every night. After the checks, we receive a status mail with issues regarding the security standards. If there are any issues, we immediately fix the reported issues. To ensure the safety of our customers’ software we only release it when the score is 100%. Our goal is to maintain this percentage of excellence.
When freight needs to be transported, it is fairly easy to determine the environment it is in. This could be a highly secure warehouse with strict safety regulations, or a storage facility on a remote industrial site where anyone can walk in and out freely. Our software is hosted on our own server in an ultra-secure hosting environment. Our server is located in a bunker at Schiphol, which we refer to as “The Bunker”, and fully complies with European regulations.
Firewalls
Multiple internet connections and redundant firewalls make sure that there is connectivity with the outside world. The entire environment is based in the state-of-the-art data centre of Equinix on the Amstel Business Parc. The servers are located in one of the best data centres of the Netherlands: TeleCity 4 – Amstel Business Parc, and the backup is located in TeleCity 5, both in Amsterdam. The locations are connected with a double 10Gbe ring (20Gbe throughput).
ISO standards
The data centre takes care of the potential environmental hazards (security, fire, power). This server environment is monitored continuously for potential threats. The facilities meet the international standards of ISO 9001: 2008 for quality, OHSAS 18001:2007 for security, ISO/IEC 27001:2005 for information security and PCI-DSS, chapter 9 for vulnerability.
Virtual Machine
It is almost impossible for someone to enter our hosting environment. All the spaces are conditioned and protected from fires, power loss and water damage. The physical server of Adaption runs on a Virtual Machine that runs on a shared hard drive by RAID. Because of this, we created a fallback scenario of five minutes. If the server crashes, another server is up within five minutes.
A daily backup of the database is created every night, and all backups are retained for 30 days. These backups are stored offsite, meaning they are not kept at the same location but in a separate secure vault. By storing backups offsite, we can always guarantee that, in the unlikely event of an issue, your data will never be lost beyond a maximum of one day.
Working in the cloud offers many advantages, one of which is that it is always accessible from any device, anywhere. However, in some cases, it may not be desirable to allow users unrestricted access to sensitive business information. That’s why access can be configured per user, specifying from which IP addresses login is allowed.
We use a securely configured proxy server to prevent threats such as cross-site scripting (XSS). Cross-site scripting is a security vulnerability in web applications, caused by improper handling of user input, which can stem from cookies, URL request parameters, or other data inputs. This proxy server acts as the only gateway to access the APEX application. All other web servers and databases are completely closed off from the outside world. There is no other way to access this data except through this secured proxy server.
Within the application, various roles can be defined. A role determines which pages, processes, and reports a user is allowed to access and execute. For example, you can specify that your transport planner cannot edit or view the billing section or HR administration.
Another option is to allow users to view data without the ability to modify it. A user can have one or multiple roles, ensuring that their access is limited to their specific function within the organization.
All logistics software solutions offered by Adaption are cloud-based. To ensure that all your data is perfectly secured, we use Tenants. A Tenant is a separate user environment that is specifically configured for end users. If your company has multiple departments or business units (B.V.’s) and you want to use the same software, you can set up a main Tenant with different sub-Tenants for each department or entity. While all master data, such as scenarios, is shared, files, quotes, and invoices are only visible to the authorized Tenants with access rights.
Logging into all our software products can be done in two ways: via username and password or via Two-Factor Authentication (2FA).
Two-Factor Authentication serves as an extra layer of security on top of the standard login process. After entering the username and password, the user receives a one-time code on their smartphone, which must be entered in the second login screen. For this method, we use the TOTP (Time-based One-Time Password) algorithm, ensuring secure and time-sensitive authentication.
Automatic Tests
All customers work with the same software release, which we continuously expand and improve. Local implementation is also possible, but in that case, you won’t benefit from the security and upgrade advantages mentioned above.We release a new version of our application multiple times per year, with all functionalities undergoing extensive testing. We take pride in our Continuous Automated Test-Driven Development (CATDD) approach, where release scripts, syntax, and functionalities are automatically tested. This ensures that everything continues to work seamlessly in each new version.
Cloud
Our applications operate in the cloud, offering a major advantage: you don’t need to manage, purchase, or maintain servers, databases, or backups. Every change you make, for example, in a shipment file, is instantly visible to other users worldwide. According to Forrester’s SaaS Maturity Model, our application is rated at Level 5, the highest level of cloud maturity, ensuring optimal scalability, security, and efficiency.
Connectivity
In the new digital world, our customers benefit from seamless integration by connecting Adaption to their own systems or third-party platforms. Whether it’s customer portals, accounting systems, or order processing, we provide the right solutions. We utilize our EDI environment to connect easily via FTP, web services, or CSV file uploads. Additionally, we work with Talend, an Enterprise Service Bus (ESB) that enables effortless integration with a wide range of systems. This allows us to implement our Supply Chain Control Tower quickly and efficiently—a win for both developers and customers.
Jira Project Management
JIRA is a project management tool designed for software development teams working with the Agile-Scrum methodology. Through short sprints, we develop new functionalities, ensuring that you are actively involved as part of the team. This approach keeps you closely engaged in the project, providing transparency and flexibility throughout the development process.
Low code
Within the Oracle APEX database, we develop our application at Adaption using Low-Code. This is a form of software development where the application is built through a graphical user interface and configuration settings instead of writing traditional code. This significantly speeds up development, reducing software costs and minimizing the risk of manual errors. However, it remains possible to insert custom-written code, allowing us to maintain flexibility in the further development of the application.
Oracle Apex
Our applications are developed on a robust Oracle database. Combined with the flexibility of APEX, Adaption can rapidly develop new functionalities, not just for you, but for all our users.
Preferred Browser
For the best user experience, Adaption recommends using the Google Chrome browser. This web browser is fast and secure, and because it adheres to web standards, it provides a better user experience compared to alternative browsers like Firefox or Internet Explorer.
Standard product
Our solutions are developed as a standard product, with all customers working on the same version. This ensures that functionality enhancements or improvements become available to everyone after a release, keeping the solution fresh and up to date. During implementation, we enrich the application with your company’s terminology, methods, and processes. This facilitates smooth adoption by your employees without the need for intensive training programs.
Would you also like to work more efficiently, gain deeper insights, and save on costs? Feel free to contact us! Our experts are happy to discuss the possibilities with you. You can also schedule a demo directly to experience our solutions firsthand.
