Security and customer data
Security
Your data stays protected. How MiracleTek is designed to control access, handle your master data and transactions, and deliver them securely to your systems of record.
Access
The right people, and only your organisation
Every operator is individually authenticated, and what each person can do depends on their authorised role.
Secure user access
MiracleTek is designed so that each operator accesses the platform through an individually authenticated account. Access to client information and functionality is controlled according to the user's authorised role, supporting secure access, transaction accountability and appropriate separation of client environments.
Role-based permissions
Operators, supervisors, approvers and administrators have different permissions, so each person sees, enters and approves only what their role allows.
Transaction accountability
Transactions and relevant activity are attributed to the authenticated person who carried them out.
Access revocation
When a person is no longer authorised, their access is revoked.
Separate client environments
Each client's users, master data, configuration, connections and transactions are kept separate. One client's users cannot access another client's environment or information.
Protected on the device
Information held on a phone or tablet for offline work is protected on that device.
Your data
Master data is retained. Transactions are not.
MiracleTek handles two kinds of client data differently. Your nominated business systems remain the systems of record throughout.
Master and reference data
Employees, assets and equipment, suppliers, supplier products and pricing, divisions, depots, locations and other reference information are retained by MiracleTek for your environment. They are needed for dropdown selections, field controls and validation, and are available only to your authorised users.
Transactional source data
Timesheets, purchasing, safety, prestart, inspection, maintenance, work-order, warehouse and other transactions are held only temporarily while the work is captured, validated and delivered. Data may be securely cached on the device so work can continue when connectivity is unavailable. Transactional data is encrypted while stored and transmitted. Once successful delivery to the customer's nominated destination is confirmed, the temporary transactional data is removed from MiracleTek. MiracleTek is not a permanent transaction database.
The life of a transaction
From capture to confirmed delivery
- CaptureA person records the work in MiracleTek, where it happens.
- Temporary secure cacheThe transaction is held securely on the device while it is completed, so work continues without a signal.
- Validate at sourceChecked as close as practical to the activity, against your master data and rules.
- Encrypted submissionOnce validated, the transaction is submitted over an encrypted connection.
- MiracleTek GatewayRoutes the transaction securely to the right destination for its type.
- DeliveredThe transaction reaches your nominated system or systems.
- Receipt confirmedSuccessful receipt by each destination is confirmed.
- RemovedOnly then is the transaction's content removed from MiracleTek, including the copy on the device.
If delivery fails, nothing is lost
A transaction is never removed just because Submit was pressed. If transmission fails, is interrupted, times out or cannot be confirmed, the transaction stays securely available for controlled retry. Removal happens only after successful receipt is confirmed.
What MiracleTek keeps afterwards
Only the minimum record of delivery: the transaction reference, when it was submitted, its destination, its delivery status and the confirmation of delivery. This record never contains the transaction's content.
Your part: the devices your crews use
Because information is held on phones and tablets for operational and offline work, good device practice adds a further layer of protection.
- Use a screen lock and passcode on every device.
- Keep the operating system up to date.
- Use your device-management tools to lock or erase a lost or stolen device.
- Remove a person's access promptly when they leave or change roles, and reset a device before it is reassigned.
Questions from your security team
We will answer your security questions plainly. Email sales@miracletek.au. Personal information about individuals is covered on our Privacy page.