EN
CZ
DE
PL
ES
FR
IT
HU
SK
UA
EL
The security your IT and procurement will ask about
Time Slot Control is a cloud service used by your staff, your carriers and the devices in your yard. This page explains where the data lives, how it is protected, who can access it and what we provide for your tender or vendor assessment.
hosting in the EU (2 locations) and the USA
guaranteed availability
all communication encrypted
data processing agreement included
Hosting and infrastructure
The application, the API and the database run in Microsoft Azure in two locations in the European Union and one in the USA. European customers' data never leaves the European Union.
- Microsoft Azure data centres: two locations in the European Union and one in the USA
- Automatic database backups within Azure, stored in the same geographic area as the customer's data
- Separate production and sandbox environments – you test integrations without touching live data
- Continuous operational monitoring; updates are included in the licence at no extra cost
Data protection
Encryption in transit and at rest, and strict separation between customers.
- All communication over HTTPS (TLS) – web application, API and Slot Monitor
- Database data encrypted at rest
- Every customer has their own instance on their own address (yourcompany.timeslotcontrol.com) or custom domain; data is separated between customers
- Reservation attachments can be marked private – visible only to your company, not to carriers or suppliers
Access and identities
You decide who may do what in the system.
- Administrator, Editor, Reader and Watcher roles, optionally restricted to specific branches
- A carrier sees only its own company's reservations; users are managed by your administrator
- Configurable password policy: minimum length, required character types, secure password reset
- Dedicated API accounts with the “API access” role; authentication by short-lived JWT Bearer token or Basic
Audit and traceability
Every change has an author and a timestamp.
- Audit log module: the complete history of every reservation – who changed what and when, including old and new values
- Timestamps for arrival, start and end of handling and departure of every vehicle
- The Automatic Gate stores the licence plate it read; vehicle weighing stores the weight with photo documentation
- Export your data at any time to Excel or via the OData API to Power BI
GDPR and personal data
Lotraco s.r.o. acts as your data processor. We process only the data needed to handle vehicles, and only for the purpose you define.
- A data processing agreement (DPA) is part of the contract
- Minimal driver data: name, phone number for SMS, licence plate
- European customers' data is stored and processed in the EU; the hosting sub-processor is Microsoft (Azure)
- When the contract ends we hand your data over as an export and remove it from the system
- Privacy policy of this website
Availability and operations
Guaranteed availability of 99.99 % means less than one hour of unplanned downtime per year.
- SLA terms and support response times are part of the contract
- Support is included in the licence and handled by the team that builds the application – nothing is outsourced
- Updates are rolled out continuously; new features are included in the licence at no extra cost
Documents for your tender
On request we provide:
- A completed security questionnaire in your own format
- A draft data processing agreement (DPA)
- Technical API documentation and access to the sandbox environment
- Reference contacts at customers of a similar size
