This is a summary for IT and other departments for buying VDA QMC products
Licensing
All tools have Named licenses:
A tool is bound to a user
It can be used on as many devices as needed by the same user
By request to the Webshop the license owner can be changed
Licenses are not limited by time for the current version
Minor updates are included in the license
Support and Updates are provided as long the book/rules are current and valid (at least 3 years)
Software
The software is a browser based progressive web app.
The products will work in current browsers with full Java script support
Optimized for tablets and workstation (will work on mobiles, but the UI is not optimized for them)
100 % Progressive web app
Full offline execution
Offline usable if browser cached is not deleted (Installed on first execution)
Server is only used for downloading the current version
Online communication is needed for license checks only (Usually within a timeframe of 2 or 4 weeks)
In case of products used with a backend with rest API the server is used
All interaction with servers (i.e. license request or API communication) are shown by messages
Products are based on Angular (old products: AngularJs) with different open source libraries
Designed as file based and offline application first
all files are json file so data can be used for data exchange
Data storage to browsers IndexDB
Is a comfort feature which works well. Not acceptable as permanent storage
Data Privacy
Outside the scope of licensing data all data is 100% private
No server communication with data outside the scope of license check
License information contains only required licensing data
Logging only for licensing and downloading of the tool
Automatically deleted after 14 days
Users are responsible for data safety in context of storage
IndexDB is not acceptable permanent data storage user have to save json and pdf files#
Security & Risks
Servers are Linux low rights servers that are regularly pen tested to avoid delivery of comprised version
Security Risks due to data communication are negligible due to 100% offline execution
Licensing requests are based on minimal required data
Security Risks for data by our products are low because data is not exchanged
IIndexDB access is only possible for the correct domain
Security risks existing only by compromised machines the tool is executed on
IIndexDB data is protected by the user account the user is using on the device
Some products allow additional local user logins and also AES data encryption
Copyright
The software is protected under copyright laws and international agreements. Any unauthorized reproduction, distribution, or use of this program, in whole or in part, may lead to significant civil and criminal penalties and will be prosecuted to the fullest extent permitted by law. © VDA QMC. All rights reserved.
Sold and distributed and non Technical support by VDA-QMC (https://vda-qmc.de/en/ ) https://webshop.vda.de/QMC/en/apps
Development, Technical Support and Service Desk management by InfoSysC (https://infosysc.de/impressum )