Versions Compared

Version Old Version 4 New Version Current
Changes made by

D.Pachula

D.Pachula

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

This is a summary for IT and other departments for buying VDA QMC products

Licensing

All tools have Named licenses:

...

Named Licensing Model

  • Each tool is bound licensed to a specific user

  • It can be used on as many devices as needed by the same user

  • By (“named license”).

  • The same user can install and use the tool on any number of devices.

  • If needed, license ownership can be transferred by submitting a request to the Webshop the license owner can be changed.

  • Licenses are do not limited by time expire for the current version Minor of the product, and all minor updates are included in the license.

  • Support and Updates are provided updates continue for at least three years, or as long as the associated book/rules are current and valid (at least 3 years)

Software

The software is a browser based progressive web app.

  • The products will work in current browsers with full Java script support

  • Optimized for tablets and workstation (will work on mobiles, but the UI is not optimized for them)

  • 100 % Progressive web app

    • Full offline execution

    • Offline usable if browser cached is not deleted (Installed on first execution)

    • Server is only used for downloading the current version

    • Online communication is needed for license checks only (Usually within a timeframe of 2 or 4 weeks)

    • In case of products used with a backend with rest API the server is used

    • All interaction with servers (i.e. license request or API communication) are shown by messages

  • Products are based on Angular (old products: AngularJs) with different open source libraries

  • Designed as file based and offline application first

    • all files are json file so data can be used for data exchange

  • Data storage to browsers IndexDB

    Is a comfort feature which works well. Not acceptable as permanent storage

    remain current.

Software

  • Browser-Based Progressive Web App (PWA)

    • Runs in modern browsers with full JavaScript support.

    • Optimized primarily for tablets and workstations, with limited optimization for mobile devices.

    • Operates fully offline after initial installation, as long as the browser’s cache is not cleared.

  • Update & Licensing Model

    • The server is only needed to download the latest version and perform periodic license checks (typically every 2–4 weeks).

    • If the product integrates with a REST API backend, additional server communication is used for data exchange.

    • All server interactions (e.g., license requests or API calls) trigger user-visible status messages.

  • Technical Stack

    • Built with Angular (legacy products use AngularJS) alongside various open-source libraries.

    • Designed primarily for offline operation, with a file-based architecture.

    • All data is stored in JSON files, facilitating easy data exchange.

    • IndexedDB is used for convenient local storage, though it is not intended as a permanent data repository.

Certifications

Because the product does not save store any data outside the clients device and client’s device—and we have no access to that data we are currently not planning cloud certifications like data—we currently have no plans to pursue cloud-related certifications such as TSIAX.

Data Privacy

  • Outside the scope of licensing data all data is 100% privateAll data—beyond the minimal information required for licensing—is fully private and resides on the user’s device.

  • No server communication

    with data

    occurs outside

    the scope

    of license

    check

    checks.

  • License information

    contains only required licensing data

    Logging only is limited to essential licensing details only.

  • Logs are generated exclusively for licensing and downloading of the tool

    Automatically

    tool-download events, and are automatically deleted after 14 days.

  • Users are responsible for data ensuring the safety in context of storage

    • IndexDB is not acceptable permanent data storage user have to save json and pdf files

    • Creation of full backup

    • Creation of report/document saves

Security & Risks

  • Servers are Linux low rights servers @Microsoft Azure that are regularly pen tested to avoid delivery of comprised version

  • Security Risks due to data communication are negligible due to 100% offline execution

    • Licensing requests are based on minimal required data

  • Security Risks for data by our products are low because data is not exchanged

    • IndexDB access is only possible for the correct domain

  • Security risks existing only by compromised machines the tool is executed on

    • IndexDB data is protected by the user account the user is using on the device

  • Some products allow additional local user logins and also AES data encryption

Copyright

  • The software is protected under copyright laws and international agreementsof their locally stored data.

  • IndexedDB is not intended for long-term storage; users must back up data by saving JSON and PDF files.

  • The tool supports creating full backups and saving reports/documents for data preservation.

Security & Risks

  • Secure Server Infrastructure

    • Our servers run on Linux with restricted privileges, hosted in Microsoft Azure.

    • Regular penetration testing ensures no compromised versions are delivered.

  • Minimal Data Transmission

    • The software executes fully offline, limiting potential security threats from data communication.

    • Licensing requests transmit only the minimal data required.

  • Local Data Storage

    • All product data remains on the user’s device, with no online exchange.

    • IndexedDB access is restricted to the correct domain and protected at the operating system level under the user account.

    • Some products support additional local user logins and AES encryption for enhanced security.

  • User-Specific Risks

    • The primary risk arises if the user’s device is compromised; otherwise, security risks are minimal given the local-only data model.

Copyright Notice

This software is protected by copyright laws and international treaties. Any unauthorized reproduction, distribution, or use of this program, in whole or in part, may

...

result in significant civil and criminal penalties, and will be prosecuted to the fullest extent permitted by law. © VDA QMC. All rights reserved.

...

Sales, Distribution & Support