On this page
- Purpose
- Scope
- SIDRA INTERSECTION
- Installation requirements for Version 11
- Data security for SIDRA INTERSECTION software
- Licence types and the cloud licensing platform
- Stored user data for software licensing systems
- Who can access the data
- Where our teams are located
- Data retention
- Single sign-on (SSO)
- Data Processing Agreement
- Certifications and compliance
- Essential Eight
- Privacy Impact Assessments and security assessments
- Policies
Purpose
This page provides details regarding information security for SIDRA INTERSECTION software and the SIDRA SOLUTIONS public-facing online systems.
Scope
This page applies to all stakeholders involved with SIDRA INTERSECTION software, including SIDRA SOLUTIONS staff, contractors, customers, and end users. It covers information security for our software licensing systems, stored user data, and the SIDRA INTERSECTION software itself.
SIDRA INTERSECTION
SIDRA INTERSECTION is the flagship product of SIDRA SOLUTIONS: lane-based micro-analytical traffic modelling software used in traffic engineering, transport planning, multi-modal traffic management, intersection design, and operations. It employs an analytical approach to modelling intersections, interchanges, streets, and networks. Key applications include:
- Traffic impact analysis
- Roundabout geometric design
- Efficient operation of traffic signal control systems
- Development of balanced Movement and Place solutions
The software supports decision-making by considering the conflicting needs of transport users (including pedestrians, cyclists, buses, trams and light rail, cars, and freight vehicles) to help deliver cost savings and environmental benefits.
Installation requirements for Version 11
System requirements for SIDRA INTERSECTION 11 are published on the System Requirements page. SIDRA software runs on Windows 10 or Windows 11, 64-bit only.
Data security for SIDRA INTERSECTION software
Data for SIDRA INTERSECTION is stored in unencrypted project files (*.sipx) in user-designated folders. Each file records when a Project, Site, or Network was first created and last modified, including:
- Date and time
- Username (from the Windows operating system account)
- Organisation name
- Software version
Software updates occur periodically, with minimal impact on IT administration. Update notifications can be enabled or disabled.
The SIDRA INTERSECTION API is accessible locally and supports .NET Core, C++, Python, VBA, and similar environments.
For 1PC and FLOATING Licences, the licence contact downloads SIDRA INTERSECTION from their online account to install the software.
Because project files (*.sipx) are not encrypted, customers handling sensitive information may wish to apply disk-level encryption (for example, BitLocker on Windows) to the folders where project files are stored.
Licence types and the cloud licensing platform
SIDRA SOLUTIONS issues several licence types for running SIDRA INTERSECTION. They fall into two groups by how they communicate for daily use.
1PC Licence
A 1PC Licence is a per-computer licence (computer-based, not network or server based). Once activated on a computer, it cannot be simultaneously activated on another. SIDRA INTERSECTION does not need to communicate with any internal or external server for daily use with a 1PC Licence. It requires an internet connection only at the licensing initialisation stage, to activate the 1PC Licence with our licensing server (secure.sidrasolutions.com).
Cloud-based licences
Our cloud-based licences run on the SIDRA SOLUTIONS cloud licensing platform. They include Subscription licences (Personal and Team) and Educational Lab subscriptions, introduced with the SIDRA INTERSECTION 11 release, and FLOATING Licences.
Team subscriptions and FLOATING Licences operate on a floating-seat basis: a set number of seats is shared by simultaneous end users within an organisation on a first-come, first-served basis. Each end user has their own credentials to sign in and obtain a licence seat.
Cloud-based licences require an ongoing internet connection to communicate with the cloud licensing platform for daily use. End users and licence administrators access the cloud licensing platform at licensing.sidrasolutions.com.
The cloud licensing platform is provided by our platform provider, 10Duke, and hosted on Amazon Web Services (AWS) in the AWS US West (Oregon) region (us-west-2), located in the United States.
For cloud-based licences, the data-processing roles are as follows: the customer (the licence holder) is the data controller; SIDRA SOLUTIONS is the data processor; and 10Duke is the SIDRA SOLUTIONS sub-processor, with AWS providing the hosting. 10Duke processes personal data only on the documented instructions of SIDRA SOLUTIONS, and personnel with access are bound by confidentiality obligations.
Read our Terms.
Stored user data for software licensing systems
The following categories of data may be stored on the SIDRA SOLUTIONS licensing systems. SIDRA INTERSECTION project and modelling files are not stored in the licensing service.
| Data category | What may be stored |
|---|---|
| Account / licence-contact details | Name, email address, company or organisation name, address, telephone, country, and a system-generated Customer ID |
| End-user details (cloud-based licences) | Name and email address; optionally job title, preferred language, and office location |
| Operational data (cloud licensing) | Licence usage, login IP address, licence user name, and timestamps |
| Licence and purchase records | Licence details and purchase history |
Payments
SIDRA SOLUTIONS does not store credit or debit card details. Card payments are processed by our third-party payment providers, PayPal and Stripe. Other information, such as a billing address or telephone number, is collected for invoicing.
Who can access the data
Access to licensing data is limited to authorised SIDRA SOLUTIONS staff for licence administration and support. Activation and deactivation logs, and other licence-function data, are stored on the SIDRA SOLUTIONS licensing systems and are accessible to authorised staff and administrators. For the cloud licensing platform, our platform provider 10Duke processes personal data only on our documented instructions, and AWS provides the hosting as our sub-processor.
Where our teams are located
Our customer service, licensing administration, and technical support teams are based at our head office in Melbourne, Australia. We do not outsource customer support.
Data retention
Under our Privacy Policy, personal information is retained for the duration of the licence relationship and for so long as is needed to provide the service, subject to any legal-obligation retention. On termination, personal data is deleted or returned. See our Privacy Policy for full details.
Single sign-on (SSO)
Our documented single sign-on path uses Microsoft Entra ID with OAuth 2.0 / OpenID Connect. With single sign-on, users authenticate against your own identity provider, so multi-factor authentication and conditional access are handled by Entra ID and user credentials are never entered into or stored by the licensing service.
Configuration guidance and the application form for administrators are published in our Knowledge Base:
Data Processing Agreement
For customers who require one, SIDRA SOLUTIONS can provide a Data Processing Agreement appropriate to their requirements. Please contact us through the Privacy Form.
Certifications and compliance
SIDRA SOLUTIONS holds ISO 9001:2015 Quality Management certification (Certificate QEC27492). Akcelik & Associates Pty Ltd is an ISO 9001:2015 Quality Certified company. ISO 9001 is a quality-management standard; it is not an information-security certification.
SIDRA SOLUTIONS does not hold SOC 2 (Type I or Type II), ISO/IEC 27001, HITRUST, CSA STAR, or the Educause HECVAT, and has not been audited under those frameworks.
SIDRA SOLUTIONS complies with the Australian Privacy Act 1988 (Cth) and the EU General Data Protection Regulation (GDPR), as set out in our Privacy Policy.
Essential Eight
SIDRA SOLUTIONS is implementing the Essential Eight cyber security framework, developed by the Australian Cyber Security Centre (ACSC), part of the Australian Signals Directorate (ASD), to strengthen our defences and protect customer data. We are targeting Maturity Level One across all eight strategies and plan to progressively strengthen our security maturity over the coming years.
The Essential Eight strategies are: application control; patching applications; configuring Microsoft Office macro settings; user application hardening; restricting administrative privileges; patching operating systems; multi-factor authentication; and regular backups.
Privacy Impact Assessments and security assessments
SIDRA SOLUTIONS supports customers and institutions conducting a Privacy Impact Assessment (PIA), a vendor privacy or security questionnaire, or a security review of our licensing systems.
On request, we provide written information about how the cloud licensing platform handles personal data, including hosting location, data categories, access, and retention.
Where a review requires technical detail about how licence activation behaves on your network, we provide that in writing, confirmed for your licence type and software version.
Please contact us through the Privacy Form.
Policies
This page should be read together with the following SIDRA SOLUTIONS policy documents:
For data-erasure requests, use the Right to Erasure Request Form.