Getting started
How long does deployment take?
+
Most organisations are live within 48 hours. The deployment checklist covers account setup, industry pack activation, user provisioning, and first incident submission. Larger enterprise deployments with SSO integration typically take 5–7 business days.
Do I need to migrate existing data?
+
Not immediately. SIRAM can be deployed alongside your existing system while you build confidence. We provide CSV import templates for historical incident data, risk register items, and user lists when you're ready to migrate.
Can I run a pilot with one team before full rollout?
+
Yes. Multi-tenant architecture means you can set up a pilot organisation with a subset of users and industry pack, then expand without data migration. Pilot and production data remain completely isolated.
Modules & features
Can I add modules after the initial purchase?
+
Yes. Module licences are purchased individually. You can add Investigation, Risk Management, Documentation, or Notifications at any time. New modules activate immediately — no downtime, no data migration.
Does the governance engine run automatically or do I trigger it?
+
Automatically. Every time an auditor is assigned to an audit, the governance engine runs all four checks (entitlement, competency, scope, conflict of interest) without any user action. If a check fails, the assignment is blocked and the system logs the reason.
Can I customise incident forms for our specific event types?
+
Yes. The form builder allows you to create custom incident types with custom fields, role-specific visibility, and custom severity scales. Industry packs pre-populate common event types but you can add your own alongside them.
How does the IOSA checklist update when a new ISM edition is released?
+
Industry pack updates are deployed centrally and roll out to all tenants on that pack automatically. You will be notified of updates, and the change log will detail what checklist items changed. Historical audit records are preserved under the edition they were conducted with.
Data, security & compliance
Where is our data stored?
+
All data is stored on AWS infrastructure in the AP-Southeast-1 region (Singapore) by default. Enterprise customers can request data residency in specific regions. All data is encrypted at rest (AES-256) and in transit (TLS 1.2+).
How does the immutable audit trail work?
+
Every action in SIRAM — incident submission, audit finding, governance check result, document approval, notification delivery — is written to an append-only Neo4j graph database. Records cannot be edited or deleted; they can only be appended. The trail is exportable for regulatory review.
Is SIRAM GDPR compliant?
+
Yes. SIRAM processes data in accordance with GDPR requirements. We are a data processor; your organisation is the data controller. Data Processing Agreements are available on request. Data subject access requests can be fulfilled via the administration panel.
Self-hosted deployment is available for Enterprise customers. This option includes a dedicated infrastructure deployment, managed updates, and a dedicated support SLA. Contact sales for self-hosted pricing and requirements.
Billing & plans
Are module licences really one-time?
+
Yes. Module licences ($5,000 per module) are a one-time lifetime purchase — you pay once and own the module permanently. There is no monthly charge per module, ever. Your recurring cost covers only users ($1/user/month), bandwidth ($1/GB/month), and storage ($1/GB/month).
What happens to my modules if I stop paying the recurring fee?
+
If your subscription lapses, module licences are preserved in your account. When you reactivate, all previously purchased modules are immediately available. There is no licence expiry.
Can I switch between monthly and annual billing?
+
Yes. Switching to annual billing saves 20% on recurring costs (users, bandwidth, storage) and takes effect from your next billing date. Module licences are not affected by billing period changes.
Do you offer discounts for NGOs or government agencies?
+
Yes. Discounts are available for registered non-profit safety organisations, government civil aviation authorities, and academic institutions using SIRAM for research or training. Contact us with your organisation details.