Alderworks Equipment Management Software holds evidence that has to stand up years later, in front of someone who was not there. SpecRun, ShiftHandover, RetainLog, PullPlan, CoverPlan, EquipLog and the Alderworks Quality Suite run on your own computer and send nothing of yours anywhere. These are the guarantees each is built on, and the companies outside Alderworks that handle any part of it.
Alderworks Equipment Management Software
Every record belongs to exactly one workspace, and that scope is enforced by the database rather than by the code that queries it. The browser holds only a public key whose reach those policies decide; the key that can bypass them never leaves the server.
Administrator, manager, technician, and viewer are separate roles, so governance is not granted alongside execution. A person joins an existing workspace only when an administrator adds them; signing up yourself creates a new workspace, never access to anyone else's.
Controlled procedures, certificate evidence, support activity, billing events, and platform actions are recorded as they happen. Where a workspace-level action cannot be written to that record, the change it described is rolled back rather than left applied silently.
Nobody signed in to a workspace, whatever their role, can change or delete an audit entry, the approval history of a calibration, or an issued certificate: the database refuses, not just the screen. A calibration cannot be approved by the person who submitted it unless nobody else in the workspace could review it, and then the certificate says so. A correction to an issued certificate is a new version; the one that was issued stays as it was, including its PDF, which cannot be replaced or deleted.
Uploaded files and generated certificates are stored under their workspace and the storage rules check that on every request. Certificates and attachments open from this domain through links that last sixty seconds, and an uploaded file is served only if it really is a PDF or an image, so nothing that a browser would run as a page is ever served from here.
Records come out through exports, reports, certificates, and public links, and they keep coming out after a trial ends or a subscription is cancelled: what stops is adding equipment, people and organizations, never reading or exporting what is already there. A suspended workspace is retained for 30 days before permanent deletion becomes possible, and after that it is gone rather than archived.
SpecRun, ShiftHandover, RetainLog, PullPlan, CoverPlan, EquipLog and the Alderworks Quality Suite
SpecRun, ShiftHandover, RetainLog, PullPlan, CoverPlan and EquipLog are one HTML file each, and the Alderworks Quality Suite puts all six in one more; they run in your browser and make no network requests. Test readings, shift summaries, workbooks, staged records, initials, orders, time-off requests, equipment registers, calibration records, and settings stay on the computer they were entered on, or in the folder you save them to.
There is nothing to sign into and nothing to install. Each download is the HTML files, documentation and screenshots, plus an icon, a video and sample files where a product has them. None contains a launcher script or an executable: the apps open straight in Chrome or Edge.
RetainLog and PullPlan each carry SheetJS Community Edition 0.20.3, unmodified, to read and write Excel workbooks; its license and the hash of the embedded copy are in the notices that come with the download. The Alderworks Quality Suite carries it inside those two apps. SpecRun, ShiftHandover, CoverPlan and EquipLog contain no third-party code, and the suite around its apps adds none.
Each product page publishes the size and SHA-256 fingerprint of the current download, with the one-line command that reproduces it, so anyone can confirm the file they received is the one we published.
A purchase is paid on Stripe's pages and the download link is emailed through Resend, as listed below. Using the tools afterwards sends nothing to us or to anyone else.
Each is licensed under the agreement that comes in its download, and each of those is published in full, before anything is bought: SpecRun, ShiftHandover, RetainLog, PullPlan, CoverPlan, EquipLog and Alderworks Quality Suite.
Subprocessors
This is the whole list, and each entry says what the service actually receives rather than what it is capable of receiving. Procurement reviewers ask for exactly this, and an out-of-date answer is worse than none.
All workspace records, user accounts and credentials, uploaded files, and a copy of each payment event Stripe sends us. Sign-up confirmation, invitation and password-reset email is composed by Supabase and handed to Resend to deliver.
Processes all requests to the service as its host. No customer records are stored there by the application.
Billing contact and payment details, entered on Stripe's own pages; for a SpecRun, ShiftHandover, RetainLog, PullPlan, CoverPlan, EquipLog or Alderworks Quality Suite purchase, also the organization named as the license holder. Card details never pass through our systems. We keep a copy of each payment event Stripe sends, which includes the billing contact but no card details.
The address of anyone sent a sign-up confirmation, invitation or password-reset email, and the link in it; the recipient addresses configured in a workspace and the contents of the reminder digest sent to them; for a SpecRun, ShiftHandover, RetainLog, PullPlan, CoverPlan, EquipLog or Alderworks Quality Suite purchase, the buyer's email address, the organization named as the license holder, and the download link.
If you find a security problem, write to support@alderworks.dev. The same address is published at /.well-known/security.txt, where security researchers look for it. We will acknowledge a report, tell you what we find, and credit you if you wish.
Alderworks holds no compliance attestation and no external audit report. Nothing on this page should be represented to a procurement process as a certification. Formal policies, data-processing terms, and retention commitments are worth agreeing in writing before a requirement depends on them; ask and we will put them in front of you.