Security and deployment
One database, yours, hosted by us or on your own server.
Written to answer a vendor security questionnaire; where a fact is not confirmed it says so.
| When | User | Record | Field | Before | After | Reason |
|---|---|---|---|---|---|---|
| 30 Sep 2026 16:41 | M. Reyes | Period | Period 9 | Open | Depreciation posted | Mass recalculation, 1,203 assets |
| 12 Sep 2026 14:02 | M. Reyes | 10577 | Status | In service | Disposed, sale | Replaced by unit 9 |
| 12 Sep 2026 13:55 | M. Reyes | CIP-0155 | Status | In progress | Capitalised as 10744 | Dock doors in service |
| 10 Sep 2026 09:18 | J. Okafor | 10412 | Federal convention | Half-year | Half-year (re-tested) | 40% rule check, Q3 |
| 03 Sep 2026 11:30 | Import | 27 assets | Created | From AP export 88213 to 88266 | Additions queue approved by J. Okafor | |
| 29 Aug 2026 15:07 | K. Lindqvist | 10240 | Cost | 9,600.00 | 9,840.00 | Freight added, invoice 88266 |
The questionnaire, answered.
| Question | Hosted by us | On your own server |
|---|---|---|
| Where is the data? | In a dedicated environment for your organisation; no other customer's data in it | In a database on your server, inside your network |
| Who can reach it? | Named users with roles, over an encrypted session; no public endpoint | Named users with roles; your network controls apply |
| Backups | Nightly, retained 30 days; restore on request | Your backup routine |
| Updates | Applied by us, scheduled with you | Supplied to you; applied by your IT staff |
| Audit trail | Every change logged with user, date, field, before, after, reason; exportable | |
| Data export and exit | Full export in Excel, CSV or SQL at any time, at no charge | |
| Multi-tenancy | None; one database per customer | |
| Third-party attestation (SOC 2, ISO 27001) | To be stated by the company with its review date; none claimed until obtained | |
| Accessibility | This website is built to WCAG 2.2 AA; a VPAT for the application is in preparation (legal page) | |
Every change is on the record.
Named users with roles (view, enter, approve, close), an activity log per user, closed periods that lock, and an audit trail nothing can edit.
What is not claimed
No SOC 2 or ISO 27001 attestation until one is obtained. No API; connections are files and mappings. If procurement requires either, we would rather say so here than in the second meeting.
The questions on a security questionnaire, answered.
Where is our data stored?
In a dedicated database for your organisation, hosted by us or on your own server. There is no shared multi-tenant database.
Is Fixed Asset Desk SOC 2 or ISO 27001 certified?
No attestation is claimed. The company will state the current status here with its review date, and will not claim one it has not obtained.
How are backups done?
Hosted: nightly, retained 30 days, restored on request. On your own server: your backup routine.
Can we take our data with us if we leave?
Yes. The complete register exports in Excel, CSV or SQL at any time, at no charge.
Try it on your own register.
Fourteen days, the full product, no card. Load your assets, run a schedule, compare it with what you filed.
Start the 14-day trialRequest a demo
Hosted by us in a dedicated environment for your organisation, or on your own server. One database per customer; your data is exportable in full at any time.
Priced by asset records. Every plan is the full product. Your data is exportable in full, at any time, at no charge. Plans from $1,000 a year.