Lowp tae content
Leid: SCO
Menu

Hou we rin

We rin the company onwhit we sell.

Oor beuks, specifications, bill o materials and SBOM, commercial record and email aw run on systems we wrote and operate. Ilka platform we sell runs the company first, sae a release that wad brak a set o beuks braks oors first.

production databases, ilk ane awned bi ae service
22
database hosts
4
countries
3
minutes recovery point on the managed fleet, at maist
5

Comparison

Whit we uise for ilka concern

Ilkane o thir records sits on a system we rin, sae we are accoontable whan ane is wrang.

ConcernUsually bocht inWe rin
The beuksA subscription tae accoontsLedger
Specifications and chynge controlA hostit issue trackerTracker
Bill o materials and SBOMA spreadsheet, gin onythingProvenance
The commercial record (CRM)A sales subscription, separate frae the accoontsTrace
Documentation and runbooksA documentation subscriptionKnowledge base
Company emailA mail and office subscriptionWabmail

Ilka system abuin is biggit, pit oot and rinnin on its ain database. Checked 2026-09-09.

The systems

The sax seestems

Ilka system covers ae concern, signs fowk in throu oor ain identity service, haes its ain database an exports its data in open formats.

  • The beuks

    Ledger

    Double-entry accoontin for siller, credits and stock. It keeps oor buiks and is the same service we sell.

    Biggit on
    Auth, PostgreSQL
    Data available as
    CSV and JSON

    Opent Ledger Ledger product page

  • Specifications and chynge control

    Tracker

    Ilka chynge tae ilka repository stairts wi a written specification and a ticket, and closes wi a note o hou it wis verified.

    Biggit on
    issuedb-cli + EARS, Identity
    Data available as
    JSON, and the ticket database committed in ilka repository

    Opent Tracker

  • Bill o materials and SBOM

    Provenance

    A asset register for the hardware, an SBOM for ilka software release we ship, an security findings trackit agin baith.

    Biggit on
    Auth, PostgreSQL
    Data available as
    CycloneDX, SPDX and VEX

    Opent Provenance Provenance product page Sign-in required

  • The commercial record (CRM)

    Trace

    Custmer relationship an revenue records, reconciled again the ledger.

    Biggit on
    Ledger, Auth
    Data available as
    CSV and JSON

    Opent Trace Trace product page Sign-in required

  • Documentation and runbooks

    Knowledge base

    Documentation for ilka platform on the estate, keepit sae that nae service's runbook exists anely in ae engineer's heid.

    Biggit on
    Auth, TokenGate
    Data available as
    Markdown and JSON

    Opent Knowledge base Sign-in required

  • Company email

    Wabmail

    A mailbox interface ower oor ain mail platform, sae company correspondence bides on infrastructure we operate.

    Biggit on
    RODMENA Mail API, Identity
    Data available as
    IMAP and mbox

    Opent Wabmail Sign-in required

Inby

The Provenance register

Fower screens frae Provenance: the hardware asset register, the evidence pack organised by control reference, the findings table wi VEX positions, and the component explorer.

Fower screens frae the Provenance bill-o-materials platform. An asset register that leets ilka device the company hauds wi its state, custodian and encryption status. An evidence export pack organised by control reference, wi sections for Cyber Essentials and for ISO/IEC 27001:2022 Annex A, ilkane statin whit the register evidences and whit it disna. A findings table that leets vulnerabilities by severity wi their CVSS score, the component and release affected, whether that release is deployed, and its VEX assessment. A component explorer that looks a component up across the hale estate by package URL.
Provenance, oor bill-o-materials platform, in uiss. We biggit it for the evidence pack: whan a buyer speirs whit components a release hauds and whit advisories affect thaim, we answer wi an export.

Big or buy

Why we bigg oor ain

For maist o thir seestems, buyin ane in wad mak little sense.

  • We sell it awready

    The ledger that keeps oor books is ane o the products on this site. Payin someone else for an equivalent wad be awfu, and rinnin it oorsels shaws us whit ilka release daes tae a wirkin set o books.

  • A register for oor ain estate

    A smaa supplier cannae subscribe tae a component inventory an security findings across its ain estate in CycloneDX, SPDX an VEX, sae we biggit a register fur it.

  • We uise staundart foundations

    Aw thing abuin rins on PostgreSQL, FreeBSD, Python, OpenID Connect an TLS wi public trust. We write the application layer, and we dinnae write oor ain databases, operatin systems or cryptography.

Risk frae key-person

A company that runs its ain systems has tae cope wi the fowk that biggit them bein unavailable. Ilka repository has its ain runbook. Ilka chynge has a specification and a ticket recordin how it wis verified. Database migrations are stored inside the database they manage, sae they survive a restore. Restores are tested end tae end, and the hale estate is descrived in a published topology.

Hou we secure it Hou ye leave Trust Centre

Dependencies

Whit ilka system is biggit on

Ilka row shaws a concern, the seestem that handles it, and the platforms frae oor ain catalogue that it rins on.

  1. The beuks

    Ledger

    Auth, PostgreSQL

  2. Specifications and chynge control

    Tracker

    issuedb-cli + EARS, Identity

  3. Bill o materials and SBOM

    Provenance

    Auth, PostgreSQL

  4. The commercial record (CRM)

    Trace

    Ledger, Auth

  5. Documentation and runbooks

    Knowledge base

    Auth, TokenGate

  6. Company email

    Wabmail

    RODMENA Mail API, Identity

The richt-hand column comes frae oor ain product catalogue. The platforms we sell are the anes we lippen on tae invoice, ship and keep records. See how the platforms fit thegither.

Arrange a walkthrough

We can tak ye throu ony o thir seestems, or send the topology, policies and capability statement for yer procurement pack.

Conneck wi us Statement o Capability (PDF)