Operation and security
Servers operated in Germany, under clear rules
Feldkontor is operated as a rental solution. The following figures are stated in the same way in the service level annex and in the data processing agreement and apply to version 1.6.3.
Operation and availability
| Operation | Virtual server of STRATO GmbH, processing exclusively in Germany, data centres certified to DIN ISO/IEC 27001 |
| Committed availability | 98 % as a monthly average, measured over the service hours |
| Service hours | Monday to Saturday, 6:00 to 20:00, time zone Europe/Berlin, excluding public holidays in North Rhine-Westphalia |
| Measurement | The login page is queried every 5 minutes, records provided per quarter on request |
| Maintenance | Announced at least two working days in advance, window preferably between 21:00 and 5:00 |
Support
| Channel | E-mail to the provider, business hours Monday to Friday, 8:00 to 17:00 |
| Language | German, English in addition |
| Class 1, operation prevented | Response 4 hours, target for rectification or workaround 1 working day |
| Class 2, operation impaired | Response 1 working day, target 5 working days |
| Class 3, other | Response 2 working days, rectification with the next version |
Backup and restore
| Backup | Daily full backup including photos, starting at 2:00 |
| Retention | 120 days, plus one copy held outside the server |
| Additional backup | Before every update, before restores, before importing construction status data and before changes to the project master data |
| Restore | A single project or the whole data set, started within one working day of the request |
| Fallback | Before every update the previous state is kept available |
Access, roles and traceability
| Login | Personal user account, password of at least 10 characters from 3 of 4 character types or 16 characters, stored only as a bcrypt hash |
| First login | One-time code valid for 72 hours, stored only as a hash |
| Lockout | 15 minutes after 8 failed attempts per IP address or 10 per account |
| Roles | Administration, project management, site management, qualified electrician, client and reader, with rights adjustable in more detail per person |
| Traceability | Editor and time stamp per record, unchangeable audit log for users, rights and projects, checksum per PDF |
Data protection
| Roles | For the data in the application the customer is the controller, the provider is the processor under Art. 28 GDPR |
| Sub-processors | STRATO GmbH for server operation and storage, A.S. Burgos Assistenz Dienstleistungen for maintenance and further development |
| Third countries | No transfer outside the European Union |
| Deletion | 30 days after the end of the contract, backups when the 120 days expire |
| Tenant separation | Separate tenants and project areas, rights checked on every access, internal content is not delivered to client and reader roles |
Documents on operation
The terms of use, the service level annex, the data processing agreement and the technical and organisational measures are handed over with the offer. The legal texts of this website are linked below.