Our Standard Hosting Service
Most organisations chose to ask us to host the Website for them.
Secure By Design Certification
In 2025 our hosting and solution was certified to meet the new “Secure by Design” standard.
The certification was carried out by the Cyber Team of a Major Public Sector body. Please contact us if you would like full details on this.
Location of Data Centers – UK
Our main servers are located in a UK Data Centre so that it complies with the UK Data Protection Act. This act sets out various standards for keeping data safe and confidential.
The data center has these features:
• ISO 27001 certification since 2008
• ISO 27018 compliance certification since 2014
• The Data Centre provides SSL
• Resources are secured to McAfee Secure Standard and we also provide full PCI Compliance.
• Manned Security and Monitoring 24 hours a day
• Smart Card Access Policies
• Internal and External CCTV
• Security Breach Alarms
NIGHTLY BACKUP TO REMOTE UK DATA CENTRE
Every night a backup of your data is taken to a remote UK Data Centre, so the UK Data Protection Act applies to your backup. Tracking Data is held for 90 days, with a full Snapshot once per month (in addition to nightly data backups).
It is sent to a different data center, just in case the data center where the server is catches fire or is destroyed in some manner or other.
The data center where the backups reside is certified to ISO 27001.
Further Security Options
We can provide the following options and settings:
- PCI Scan – We run a PCI Scan (penetration test) to check the Server and Website meet the standards required by Credit Card Companies to allow credit card transactions to be taken on their server. Whilst do not use credit cards, we felt it was a “known” security standard and that in meeting it our customers can feel more secure.
- IP Address Tracking – The IP Address of those trying to Logon is obtained and Logged. If we determine multiple failed Logon Attempts, the solution will “Throttle Back” first, but if it continues it will block the User Account (so it can no longer be used) and send an escalation email to our Customer and Us.
- Fixed IP Address Range Option – If your organisation operates within a fixed IP Address Range or Address Ranges we can configure the system to only allow connection from IP Addresses within the ranges set.
- Banned IP Address Ranges – You / We can set a Banned IP Address Range or Addresses, so if there are known threats we can stop them even getting to the Logon page.
- Detection of Attack – The system attempts to look for People or Password Breaking Software and will first of all operate a Throttle back, but will then move to Blocking the User Account and sending an escalation email to warn of the attack.
- Customer / Our Staff can access the Logs to see if a somebody has forgotten their password or indeed if there is something more sinister going on.
- 2FA (Two Factor Authentication) can be set at any User Level.
- Complex Passwords – These are enforced and our settings option allows you to upgrade the minimum length of the password as time goes on. Bear in mind it will go up over time.
- Forced Password Changes – The frequency of Mandatory Password Changes can be set to suite your environment.
Self Hosting / "Internal Only Solution"
In some cases customers can decide to host the Website part of DeliveryPoD themselves. This is fine with us, it is a good option when the customer has a good IT Department with experience in hosting Website / Web Applications.
The main skills they will need are:
- Microsoft IIS
- Microsoft ASP.Net Hosting
- Microsoft SQL Database
- Understanding the importance of Security, Data Backup and Mission Critical Applications
Some organisations prefer to create Internal Only solutions, that are not accessible from outside their organisations IT infrastructure. So this is a good fit for them.
It is also worthwhile mentioning that the solution can work without Wireless LAN. Organisations that want to isolate their solutions, may also have a “No Wireless LAN” policy or to be able to work with Wireless LAN switched off at times of heightened security.
The Mobile Computer software was designed on a Store and Forward basis. If it can send in real time – it will do so, but if it is out of coverage (or 5G / Wireless LAN is switched off ) it will keep the data until it is sent – in this case via a Desk Cradle with a Wired Ethernet Connection.
Isolated System Hosting on a Single PC
It is true, you can host the DeliveryPoD Website on a PC / Laptop and have a self contained setup. In fact we use this setup for onsite customer demonstrations.
This can be viable in some customer situations too, but you need to bear in mind these considerations:
- A backup of the Tracking Data needs to be taken periodically. This can be more of a challenge than when a server is used
- The PC / Laptop may be stolen or broken – in which case if a recent backup has not been taken, you have a problem.
- Access to Self Service Portal – Laptops / PC’s are not designed to host websites for large numbers of concurrent users.
- Automatic Email Requests – These may be possible, but only if the PC / Laptop is left switched on. Otherwise an event that should trigger an email occurs, but the PC / Laptop is switched off – so nothing actually happens.