Every action logged. Every record verifiable.
IBIOS standard compliance gives your business an audit trail your auditors can inspect, access controls your staff cannot circumvent, and data handling that meets UK expectations for a trade business handling customer data. IBIOS is made by IBIOS Limited (NI743167) in Northern Ireland, with production hosted in the UK.
Standard security and compliance features
Immutable audit trail
Every action logged by user, timestamp, and IP. Cannot be altered by any account holder.
Role-based access
Granular permissions per role. Cost prices, delete access, and audit visibility all individually controlled.
Encrypted backups
Database backups encrypted. Passwords hashed with bcrypt, never stored in plain text.
Encrypted in transit
All data moving between your browser or app and IBIOS encrypted in transit.
UK-hosted
Production hosted in the UK. Some AI processing uses US providers today; UK-only AI processing coming soon.
JWT authentication
Short-lived signed tokens. Sessions expire and require re-authentication.
What does the IBIOS audit trail record?
Customer record created, updated, or deleted — who, when, what changed
Quote created, revised, approved, or sent — version history preserved
Supplier order raised, acknowledged, delivered, or invoiced
Payment received, recorded, or reconciled
User account created, permission changed, or password reset
AI action taken on behalf of your business — logged separately from human actions
Related: user roles and per-person access rights, backup and restore, the customer and job CRM the audit trail covers, and the AI audit trail (coming soon).
What do businesses ask about IBIOS security and compliance?
What does IBIOS log in the audit trail?
Every create, update, and delete action in IBIOS is logged with the user who performed it, the timestamp, the IP address, and the specific fields changed. Quote edits, customer record changes, supplier order updates, and payment records are all covered. The audit trail cannot be edited or deleted by any user, including administrators.
Can I restrict what individual staff members can see and do?
Yes. IBIOS uses role-based access controls with granular permissions. You control which roles can view cost prices, which can approve quotes, which can delete records, which can view the audit trail, and which can manage other users. Permissions are enforced at the application layer, not just through UI visibility.
Is data encrypted?
All data in transit is encrypted over HTTPS. Database backups are encrypted. Passwords are hashed using bcrypt and are never stored in plain text. API tokens are short-lived and signed.
Where is our data stored?
IBIOS production is hosted on servers in the United Kingdom. Some AI processing currently uses US-based providers (Groq and OpenAI) under UK transfer safeguards — see /legal/subprocessors. Coming soon: UK-only AI processing on our own GPUs. Your account data is isolated from other customers' data at the database level.
Can we export all our data if we want to leave IBIOS?
Yes. Your data belongs to your business. If you need a copy of your customer, job, quote and supplier order records, contact us and we will provide it.
Security your auditors can inspect.
IBIOS standard compliance: immutable audit trail, role-based access, UK hosting. Early access by waiting list.