Skip to content

Security and hosting

Where your data lives, and how we look after it.

StockBases runs on infrastructure we operate in Belgrade and Bucharest. This page lists exactly what is in place today.

Hosting and reliability

  • Two servers, two cities

    StockBases runs on servers in Belgrade, Serbia and Bucharest, Romania. One serves the application, the other stands by.

  • Continuous replication

    The PostgreSQL database streams every change to the standby over an encrypted WireGuard tunnel, so the second copy is normally only seconds behind.

  • Nightly backups

    The database is backed up every night on both servers, and each backup is kept for 14 days.

  • Monitored every minute

    A monitor checks the service every minute and alerts the operator after two failed checks in a row.

  • HTTPS everywhere

    All traffic goes through Cloudflare over HTTPS, with a verified certificate on the origin server as well.

  • Stored in Europe

    Your company data and its backups are stored on the two servers in Serbia and Romania.

Your team, in a browser or phone
HTTPS
Cloudflare, HTTPS through to the server
to the primary

Belgrade

Serbia

PostgreSQL, primary or standby

Nightly backups, 14 days

Continuous
replication

Bucharest

Romania

PostgreSQL, primary or standby

Nightly backups, 14 days

Health checked every minute, with alerts to the operator

Access and accountability

Decide who can see and change what, and keep a record of everything that happened.

  • Security groups

    36 permissions per group, plus limits by site and category. People only see and change what their group allows.

  • Activity log

    The activity log shows who did what and when, with IP address and browser, and exports to Excel or PDF.

  • Field-level history

    Each asset keeps the old and new value of every field that changed, and who changed it.

  • Account protection

    Passwords are stored as bcrypt hashes, sessions are protected against cross-site request forgery and new accounts verify their email address.

  • Controlled API access

    The REST API is off by default. When enabled, tokens are stored hashed and can be limited by scope, IP address and expiry date.

Need details for a security review?

Send your questionnaire to sales@stockbases.com and we will answer it point by point.

See StockBases with your own equipment.

Pricing is quoted per company. Tell us how many assets and users you have, and we will set up a demo and send a price.