Security and Data Control

Control begins with deployment

Choose where the application runs and how it can be reached

Self-hosting gives your organisation control over the computer or server that holds the YouDoSoftware installation and business database.

That deployment choice is one part of security. Local-network boundaries, multi-factor authentication, remote-access policy, application user permissions, system maintenance and backups must be considered together.

Separate decisions, working together

  • Location: select the computer, local server or cloud server that runs the application.
  • Reachability: decide whether access remains local or is made available remotely.
  • Authorisation: configure the people and policies permitted to pass each access layer.
  • Operations: maintain the host environment, configuration and appropriate backups.

Layered access

Remote availability and user permission are not the same decision

A remote route makes the service reachable. It does not replace the need to control who may use the route and what each signed-in user may do.

01

Network or tunnel

Local network rules or the configured Cloudflare Tunnel determine how a browser request reaches the installation.

02

Cloudflare Zero Trust

Cloudflare Zero Trust can verify a remote user's identity using the verification methods selected in Cloudflare before passing the request to YouDoSoftware.

03

Application access

YouDoSoftware sign-in, authenticator-app MFA and application permissions govern access within the business system itself.

Multi-factor authentication

Verify identity at the application and remote-access layers

YouDoSoftware and Cloudflare Zero Trust provide separate MFA controls. An organisation can use the application control for local access and add Cloudflare verification when the application is published remotely.

YouDoSoftware MFA

For local or remote application sign-in, YouDoSoftware can require the user to complete a second verification step using an authenticator app.

MFA can be enabled globally for everybody or applied selectively to individual user accounts. This allows an organisation to enforce one policy across the business or introduce additional verification for particular users.

This MFA check belongs to the application account and operates independently of the network route used to reach YouDoSoftware.

Cloudflare Zero Trust verification

When Web Publish is used, Cloudflare Zero Trust can require identity verification before a remote request reaches the YouDoSoftware sign-in page.

Cloudflare supports multiple types of verification, allowing the organisation to select the methods appropriate to its access policy and configuration.

Your operating environment

Control brings practical responsibilities

YouDoSoftware does not remove the normal responsibilities involved in operating a computer or server that holds business data. The host should be maintained, access should be limited appropriately and recoverable backups should form part of the organisation's routine.

Detailed installation, user, backup and Cloudflare configuration procedures belong in the administration documentation, where they can be maintained as the software changes.

Continue with the deployment choice

Compare the local, cloud-server and Cloudflare Tunnel routes before reviewing the applicable setup guidance.

Platform overviewWeb Publish