Security
Security And Access Controls
Your orders, your prices, your drawings and your customers’ part numbers stop living in spreadsheets on a shared drive and start living in one system.
Why it matters
Scattered Data Is The Harder Problem
A Spreadsheet Is A Copy, And Copies Spread
A quotation workbook gets emailed, saved to a desktop, and sent to a customer with the costing tab still in it. Nobody did anything wrong, and the price list is now outside the building.
Drawings In Four Places Age Differently
When the approved revision lives on a shared drive, in an inbox and on the floor, the question is not whether they will diverge but when somebody will notice.
Leavers Take What Was Local
Removing somebody from the file server does not reach the workbook they kept locally. A single system means there is one place where access ends.
Record Who Changed What
When the record of what happened is a folder, reconstructing a decision from last quarter means trusting file dates. Work recorded as it happens does not need reconstructing.
Access
Who Gets In, And What They Can Reach
Microsoft Sign-In
Sign in with your existing Microsoft work account, so joiners and leavers are handled where your other accounts are handled. Included in every package.
Two-Factor For Password Accounts
An authenticator app, six digits on a thirty-second code. Recovery codes are shown once and only their hashes are stored, so nobody can read them back out of the system afterwards.
Your Rule, Not Ours
An administrator sets whether two-factor is optional, required for administrators, or required for everyone. A person who has to set it up is told so at sign-in and cannot go round it.
Failed Sign-Ins Get Slower
Four wrong passwords cost nothing, because a typo is not an attack. The fifth locks the account for a minute, the sixth for five, the seventh for fifteen, and after that for half an hour.
Permissions By Area And Site
Each screen is a permission, set per role, and every query is scoped to the site the server resolved rather than one the browser asked for. Licensed features are checked on the server; hiding a button is not an entitlement control.
Operators Are Not Office Users
A shop-floor seat carries the Operator role and booking on and off jobs. Supervisors, planners, buyers and quality staff need a named office account, so the shop floor is not a route to the office.
Records and accountability
What Happened, And Who Did It
Corrections Add Records
The operational history records changes and corrections, with who made them and when. A correction adds a record rather than replacing one, so the history cannot be quietly rewritten to say something different from what happened.
Core, Factory and Connected Factory provide a ninety-day window for viewing audit history, and an Enterprise contract can extend it. How long the records are stored is agreed separately from how far back the screen will show.
Approval And Release Are Controlled
Quality release, controlled documents and engineering change each move through review, approval and effectivity rather than a single edit. A works order keeps the revision it was released against, so a later change does not alter what was made.
Keystone AI reads; it never writes. No tool can change a record, run a command, send a message or control a machine, and machine collection is read-only in both directions.
What reaches an AI provider, and what never does, is listed in full on the Keystone AI page: no lookup returns prices, costs, margins, customer names or staff names, and a staffing clash is sent as a work centre and a day without the person.
Hosting, backup and recovery
Ask Us, And We Will Put It In Writing
Deployment arrangements differ by customer, so we do not publish a single answer here and leave you to discover it does not apply to you.
Hosting, backup schedules and retention, recovery arrangements, incident handling and the processing boundary for AI are covered in a security information pack, written for the person who has to sign it off. Ask for it before you buy rather than after.
Security questions are answered directly and in detail, by the people who built the product and run the infrastructure, not by a form.
Who builds it
Developed And Supported By Commstec
Keystone Precision is developed and supported by Commstec IT Ltd, a Sheffield managed service provider registered in England and Wales under company number 10871613. Looking after other people’s systems is the day job, and it informs how this one is built.
The accreditations below are held by Commstec IT Ltd, not by the Keystone Precision product.
- Cyber Essentials certified.
- ISO 27001 aligned. The information security management system is run to the controls the standard sets out. It has not been audited and certified against ISO 27001 by an accredited certification body, and we do not describe it as certified.
- Registered with the Information Commissioner’s Office under ZC071809.
Security information
Security Questions Are Answered Directly
Contact us for security information for your IT team or auditor. We can discuss access controls, hosting, backups and incident arrangements, and provide detailed information through an appropriate review process.