// methodology

Standards & Methodology

A unified approach to architecture, security and quality management — regardless of which member company leads the project.

// delivery model

How we organise work

Competency-driven management

Project teams are engaged based on domain expertise, not hierarchy or resource availability. This eliminates the handoff effect between contractors.

Single accountability point

Regardless of how many member companies are involved, the client interacts with a single contact and receives a single contract, SLA and reporting.

Shared technology foundation

A significant number of products are built on UnityBase, ensuring predictable component integration, a unified security model and a shared API contract.

Security by design

Security is addressed at the architecture level, not added after development. The approach aligns with ISO/IEC 27001, NIS2 and GDPR requirements.

// standards

Standards & Compliance

ISO/IEC 27001
Information Security

Information security risk and incident management. Member systems are developed in alignment with this standard.

NIS2
EU Cybersecurity

EU directive on cyber resilience of critical infrastructure. Softline supports compliance audits for clients in regulated sectors.

GDPR / Data Act
Data Protection

Requirements for processing and storing personal data in EU systems. Addressed at the platform architecture and API contract level.

Zero Trust
Security Architecture

Perimeterless security model: every request is authenticated and authorised regardless of connection origin. Implemented by Softline.

DevSecOps
Development & Security

Security integrated into the CI/CD cycle: vulnerability scanning, static code analysis and automated compliance checks at every stage.

ISO 9001
Quality Management

Quality management principles for development and service delivery processes. Includes process documentation, internal audits and non-conformance management.

// development approaches

Development Methodologies

Agile / Scrum

Iterative development with two-week sprints, regular retrospectives and client progress demos. Applied to product and custom development projects.

CI/CD

Continuous integration and delivery: automated builds, testing and deployment across all environments. Reduces release cycle time and regression risk.

Domain-Driven Design

System architecture is built around the business domain, not technical convenience. Critical for complex enterprise systems with a multi-year development horizon.

Infrastructure as Code

Infrastructure is described as code (Terraform, Ansible), ensuring environment reproducibility, versioning and automated disaster recovery.

// support

Service levels & support

SL Global Service provides managed support for UnityBase-based solutions and member infrastructure. SLA tiers are customised to client requirements.

Standard tiers: Base (8×5, next business day), Standard (12×5, 4 hrs), Premium (24×7, 1 hr). For critical infrastructure a Mission Critical tier is available with a target recovery time under 15 min.

Base
8×5 RTO: Next day
Standard
12×5 RTO: 4 hrs
Premium
24×7 RTO: 1 hr
Mission Critical
24×7 RTO: 15 min