Our quality and information security management practices are aligned with ISO 9001 and ISO 27001.
This page sets out how we work: how we look after quality, how we protect client code and data, and what you can expect from us on every project.
Our quality policy
ISVR Technologies designs, builds and supports software that our clients rely on to run their business. We are committed to:
- understanding and agreeing each client's requirements before we build, and confirming them in writing;
- delivering software that meets those agreed requirements and the legal and regulatory requirements that apply to it;
- reviewing and testing our work at defined points before it reaches the client;
- setting quality objectives for our delivery, checking progress against them and acting on what we learn;
- listening to client feedback and complaints, and using them to improve how we work;
- continually improving our processes, tools and skills.
This policy is set by our Founder / Director, Davinder Kumar, shared with everyone who works with us, and reviewed regularly.
Information security
We protect the confidentiality, integrity and availability of the information our clients trust us with.
- Access control: people get access only to the systems and data their work needs, and access is removed when it is no longer needed.
- Secure development: security is considered from design through to release, not added at the end.
- Backups: client systems we host are backed up, and backups are protected.
- Incident handling: security incidents are recorded, investigated and reported to affected clients without delay.
- Supplier security: we choose hosting and service providers with security in mind and review them over time.
- Staff awareness: everyone who works with us knows their responsibilities for protecting information.
How we deliver a project
- Discovery: we learn your goals, users and constraints.
- Requirements sign-off: we agree in writing what will be built.
- Design: screens, flows and technical design, reviewed with you.
- Development with code review: every change is reviewed by another engineer.
- Testing and QA: we test against the agreed requirements.
- User acceptance testing: you test the software before it goes live.
- Release: a planned, repeatable release to production.
- Warranty: we fix defects found after launch within the agreed warranty period.
- Support: ongoing maintenance and improvements, if you choose.
Secure development practices
- Code reviews on every change
- All code kept in version control
- Separate development, testing and production environments
- Least-privilege access to systems and data
- Dependency and vulnerability scanning
- Encrypted backups
- Non-disclosure agreements with clients and staff
Data protection
We handle personal data in line with India's Digital Personal Data Protection Act, 2023. For international clients, we are aware of the requirements of the EU General Data Protection Regulation (GDPR) and agree how personal data will be handled before a project starts.
Business continuity
Client code is kept in version control rather than on individual machines, systems we host are backed up, and deployments are documented so that more than one person can maintain a system. How code, credentials and documentation are handed over is agreed in each contract.
Questions
If you have a question about how we manage quality or security, or want to raise a concern, write to [email protected] or contact us.