Development Log

ENODEUS is developed with an ongoing process of security, privacy, and legal review. This page summarizes that process in plain language. For technical details of how AI is used in the product and in development, see AI Usage & Transparency. For the legal terms, see our Terms of Service and Privacy Policy.

NDT Asset Traceability System

• Launched full NDT Asset Traceability module: QR-code asset management, inspection history, Non-Conformance Reports (NCRs), Corrective and Preventive Actions (CAPAs), and immutable audit trace logs.
• Asset trace logs are implemented as append-only records — no update or delete is permitted, ensuring industrial audit trail integrity in accordance with NDT standards (ASME, ISO, EN, API).
• NCR workflow implemented: automatic NCR creation on rejected inspection result, automatic Work Order to manager with 7-day deadline, direct message notification.
• CAPA workflow: manager assigns corrective action from NCR dashboard, triggering automatic re-inspection Work Order to the original inspector with 5-day deadline.
• All new Firestore collections (ndtAssets, inspections, ncrs, traceLog, assetCounters, ncrCounters) protected with role-based security rules deployed to production.

B2B Platform — Role Separation

• Three distinct user roles fully implemented and separated: Inspector (free), Manager/Jefe (free, joins company by invite code), Company/Empresa (paid, USD 99/year).
• Each role has a dedicated dashboard with role-appropriate features. Company dashboard includes team management, NCR/CAPA overview, projects, and work orders across all teams.
• Inspector Freelancer (free plan) cannot access Company or Manager features — enforced at the routing level and at the Firestore security rules level.
• Company subscription gate prepared for Stripe integration (pending activation).

Security audit — 27/27 tests passed

• Full penetration test covering: auth attacks (JWT spoofing, SQL injection in headers, XSS), business logic bypasses (cross-company data access, role escalation, ownerUID manipulation), binary/API key exposure, rate limiting/DoS, injection payloads (SQL, NoSQL, XSS, SSTI, XXE, LDAP, null byte), and HTTPS/TLS.
• Result: 27/27 tests passed — 100%. No critical or high-severity vulnerabilities found.
• Account deletion audit: 17/17 tests passed. Data cleanup on account deletion verified across all collections.
• Load test: 400 concurrent users, p99 latency 217ms, 0 errors, 91 requests/second.
• Crash test: 10,000 concurrent users (70% Inspector, 20% Manager, 10% Company), 0 crashes.

Infrastructure hardening

• 12 composite Firestore indexes deployed to production for optimal query performance on all role-specific data access patterns.
• HTTP → HTTPS redirect fixed on enodeus.ch (Apache behind Infomaniak reverse proxy — required X-Forwarded-Proto header).
• HSTS header confirmed active: max-age=31536000.
• Cloud Function for automated data cleanup on account deletion written and ready for deployment on Firebase Blaze plan activation.

Legal & compliance documents updated

• Privacy Policy updated to v2.0: added NDT Asset Traceability data section, Company & organizational data section, data sharing within organization section, subscription/billing section, and updated security section (Firebase App Check, iOS Keychain).
• Terms of Service updated to v2.0: added three-role model (Inspector/Manager/Company), industrial data & traceability section, Manager role clarified as free, Stripe billing disclosed.
• AI Transparency updated to v2.0: clarified which modules use AI (NDT image analysis only) and which do not (Asset Traceability, all other modules), added security/access control section.
• Security Audit Report generated as internal PDF document (CONFIDENTIAL — not public).

App Store

• Build 8 approved and live on App Store (id6777932446) — resolved all submission issues including iPad crash, Sign in with Apple nonce, Age Rating, and iOS 26 SDK requirement.
• Build 9 in preparation with all July 2026 features.

Security & privacy review

• Database access rules reviewed and tightened so users can only access data relevant to their own account, role, and organization.
• Fixed senderUID spoofing vulnerability across all 4 message collections.
• Restricted user profile read access — previously any authenticated user could read any other user's profile.
• Added recipient validation to Work Order creation to prevent spam to arbitrary UIDs.
• Added array size limits to company updates (max 200 members, max 10 managers).
• Removed SSL bypass vulnerability in WelcomeView.
• Converted 4 force-unwraps to safe optional bindings in messaging code.
• Applied character limits to 24 text input fields across 15 files.
• Rotated iOS Distribution certificate after discovering it was stored in iCloud-synced location.
• Soft-delete mechanism added to account deletion (copies to internal retention before permanent deletion).
• Removed a sensitive personal data field (insurance identification) not essential to the product's core function.
• Added input validation across the app to prevent malformed or excessive data submissions.

Legal & transparency

• Updated Terms of Service to clearly disclose the AI model used in the product (YOLOv8-based computer vision).
• Added clause clarifying that users uploading photos or videos are responsible for holding the rights to that content.
• Published Development Log and AI Usage & Transparency page.
• Reviewed data collection practices ahead of App Store privacy disclosure requirements.
• ISO 9001:2015 documentation set of 11 procedures created from scratch for internal quality management.

Product & account management

• B2B SaaS layer built: Company accounts with join codes and QR generation, real-time messaging (direct and group), Work Orders system, Manager Dashboard, VisionKit QR scanner, Firebase Storage attachments.
• Account deletion extended to all three roles (Inspector, Manager, Company).
• NDT form refactored into modular sections with collapsible UI and progress bar.
• Design system established: IBM Plex Mono/Sans fonts, color tokens (#0F1117 background, #F5C400 accent, #3DDC97 OK, #FF5C5C fail).
• App submitted and approved on App Store — Build 8 live.