NCrewline 2.3 · operations system by NexaIT
Security and GDPR built in from day one.
Crewline runs entirely on your infrastructure, sends no telemetry or data to NexaIT and, by design, stores no HR data. Before every release we run automated security tests, dependency and image scanning and an active vulnerability test, and we describe the results in a report attached to the release.
Data stays on your server.
We install Crewline on your corporate network or on a server you rent in the cloud. The application uses no external cloud services, sends no telemetry and can run without internet access or external content delivery networks, and database backups are created on your server to your schedule.
For plants with a segregated production network, automotive suppliers meeting their customers’ requirements and companies wary of storing data with providers outside the European Economic Area, this is usually the deciding argument, because operational data leaves your infrastructure only where you send it yourselves: by email, to chat channels or via a webhook.
Simpler GDPR, because there is no HR data.
Crewline is operations software, not HR software. It does not store contracts, named holiday leave, reasons for absence or personnel files, and it knows absence only as percentages and counts. An employee code and a display name, such as a first name and initial, are all you need to manage the workforce, so the scope of personal data is small and deployment does not require migrating HR records.
Views are aggregated to process, department and shift by default. An administrator can enable workforce pseudonymisation, in which case people without the right to named data see only codes instead of names, and every display of names by someone with that right is logged. We also include a data protection impact assessment template in the documentation.
- workforce pseudonymisation enabled with a single switch
- log of personal data views
- DPIA template for the data protection impact assessment
No ranking of people and no black box.
Crewline’s calculations are deterministic and explainable: the plan, standards, KPI formulas and analytics follow transparent rules that can be traced step by step, and every figure in the balance shows where it came from. The system does not assess employees with a machine learning model and does not rank people.
The staffing optimiser assigns the staff present to processes according to qualifications and staffing limits, and the shift leader always sees the proposal before it is applied and can change it. Decisions about people remain in the hands of managers.
Least-privilege access, only what each person needs.
You assign roles scoped to the whole organisation, a single site or a department together with its sub-departments. Built-in roles cover administrator, executives, site manager, planner, department manager, shift leader, data entry operator, a view-only role and an integration account, and a department manager can write figures only for their own department, even if they try to bypass this restriction through the API.
Company sign-in works via OpenID Connect, for example with Microsoft Entra ID, Google or Keycloak, using PKCE and verification of the issuer, audience, expiry and a one-time state bound to the browser. An account is linked to a company account on the basis of an email address verified by the identity provider or, with Microsoft Entra ID, taken from the company directory, and financial data such as rates and labour costs requires a separate permission.
- passwords stored as argon2id, minimum 10 characters on change
- sessions in httpOnly cookies with a CSRF token, valid for 12 hours
- lockout after 10 failed sign-ins within 15 minutes
- API tokens and TV board links stored only as hashes
- secrets such as the SMTP password and webhook keys encrypted in the database
Security testing before every release.
We verify security with tools, not declarations. Before a release we run static code analysis, a Python and JavaScript dependency audit, container image scanning and an authenticated passive and active OWASP ZAP vulnerability test, which in release 2.3 covered 294 URLs from the API specification. Operations excluded from the scan, such as file imports and PDF generation, are checked by a separate test suite.
A separate suite of 380 security tests checks, among other things, the authorisation matrix of every endpoint, attacks on company sign-in tokens and protection against requests being sent to internal addresses. In release 2.3, all of these checks completed with no open high or critical severity issues.
- static analysis of the application server code: 0 issues across 40,600 lines
- dependencies and images: 0 known high and critical vulnerabilities with an available fix
- active API scan: 294 URLs, 118 rules without errors
- strict CSP and server security headers
An audit trail of every change and backups that actually work.
The change log records who changed the configuration, standards, plans, staffing baselines and actuals, and when, with the values before and after the change. Changing a budget standard requires a reason, and actuals corrections and decisions in the exceptions inbox remain in the history permanently.
A database backup is created daily with rotation, and the documentation describes the restore procedure together with a script that checks whether the backup can actually be restored. Vulnerabilities can be reported confidentially under the published security policy.
Questions about Crewline: security.
Where is Crewline data stored?
Only on your own infrastructure: on a server on your network or on a server you rent in the cloud. Crewline uses no external cloud services and sends no telemetry, and backups are created on your server.
Does Crewline process employees’ personal data?
Only to a very limited extent: employee code, display name, department, work type and operational qualifications. It does not store contracts, named holiday leave or reasons for absence, and pseudonymisation lets you hide names from people without the appropriate right.
Can we sign in with a Microsoft 365 account?
Yes, Crewline supports company sign-in via OpenID Connect, including Microsoft Entra ID, Google and Keycloak. The administrator creates the Crewline account for the email address of the company account, and local accounts with passwords can run alongside.
Is Crewline subject to the AI Act as a high-risk system?
Crewline does not assess or rank employees with a machine learning model, and its calculations are deterministic and explainable. The final legal classification of the system within your organisation should nevertheless be assessed by your lawyer or data protection officer, to whom we will gladly provide the documentation.
How often is Crewline tested for security?
Before every release: static code analysis, a dependency audit, container image scanning, passive and active OWASP ZAP scans and a suite of 380 security tests, including an authorisation matrix for every endpoint.
Online demo · no obligation
See Crewline live, using your own processes as the example.
- Online demoWe walk through the full cycle on demo data from a distribution centre and an assembly plant, then ask about your processes, your shifts and the spreadsheets you plan in today.
- QuoteWe quote the licence, deployment and optional support for your company in a single offer, prepared after a conversation about scope.
- Installation and configurationA server on your network or one you rent in the cloud, an industry template, processes, process flows, standards and data migrated from your spreadsheets.
- Go-live with your teamThe first plan, the first huddle and training for planners, shift leaders and managers on the screens they will be using.