Standards & Methodology
A unified approach to architecture, security and quality management — regardless of which member company leads the project.
How we organise work
Competency-driven management
Project teams are engaged based on domain expertise, not hierarchy or resource availability. This eliminates the handoff effect between contractors.
Single accountability point
Each project has an agreed lead member company and client contact. The contractual model, SLA and reporting are defined around the participating teams and their responsibilities.
Shared technology foundation
A significant number of products are built on UnityBase, ensuring predictable component integration, a unified security model and a shared API contract.
Security by design
Security is addressed at the architecture level, not added after development. The approach aligns with ISO/IEC 27001, NIS2 and GDPR requirements.
Standards & Compliance
The formal standards and architectural practices that underpin the alliance delivery model: security, quality, regulatory compliance and controlled change management.
Information security risk and incident management. Member systems are developed in alignment with this standard.
EU directive on cyber resilience of critical infrastructure. Softline supports compliance audits for clients in regulated sectors.
Requirements for processing and storing personal data in EU systems. Addressed at the platform architecture and API contract level.
Perimeterless security model: every request is authenticated and authorised regardless of connection origin. Implemented by Softline.
Security integrated into the CI/CD cycle: vulnerability scanning, static code analysis and automated compliance checks at every stage.
Quality management principles for development and service delivery processes. Includes process documentation, internal audits and non-conformance management.
Development Methodologies
Iterative development with two-week sprints, regular retrospectives and client progress demos. Applied to product and custom development projects.
Continuous integration and delivery: automated builds, testing and deployment across all environments. Reduces release cycle time and regression risk.
System architecture is built around the business domain, not technical convenience. Critical for complex enterprise systems with a multi-year development horizon.
Infrastructure is described as code (Terraform, Ansible), ensuring environment reproducibility, versioning and automated disaster recovery.
Service levels & support
Support is delivered by member companies. The SLA tiers below are examples: recovery time objectives (RTO), support hours and responsibilities are agreed in the contract for each solution.
Standard tiers: Base (8×5, next business day), Standard (12×5, 4 hrs), Premium (24×7, 1 hr). For critical infrastructure a Mission Critical tier is available with a target recovery time under 15 min.