Awa by Devlab · security
Security, roles and hosting of Awa
Awa protects the purchasing workflow with individual accounts, five roles that limit what each person sees, segregation of duties and an audit trail of every action. The application and its data are hosted by Scaleway in the Paris region, with an automatic daily backup of the database. Awa is published by Devlab in Tahiti, French Polynesia.
Accounts and roles
Each user signs in with their own account and has one role: Manager, CFO, CEO, Accountant or Admin. The role decides the menu, the possible actions and the visible orders: a Manager only sees their own orders.
Internal control and audit trail
Nobody approves, signs or rejects an order they created, and a rejection requires a comment. The history of each order shows who submitted, approved, rejected, signed or booked it, with the date and comment. Generated Excel exports are kept in a history.
Hosting and data
The application, the database and the files are hosted by Scaleway SAS in the Paris region; the website is served by Vercel. The database is backed up automatically every 24 hours and each backup is kept for 7 days. Quotes and invoices sit in private storage and open only through temporary links.
Web protections
HTTPS is enforced, a content security policy limits the allowed scripts and the application cannot be displayed inside a third-party page. Excel exports neutralise cells that could contain a formula.
Frequently asked questions
Where is Awa's data hosted?
By Scaleway SAS in the Paris region: the application, the database and the files. The database is backed up automatically every 24 hours.
Is Awa an electronic archiving system?
No. Awa keeps the history and documents of each order, but it is not an electronic archiving system with legal evidential value.
Awa is published by Devlab, a digital agency founded in 2014 in Tahiti. devlab.io · contact@devlab.io