Take the tour Book a demo

Trust CenterFor supplier audits

Everything your supplier audit needs to know about us.

Pharma companies qualify their software suppliers. This page — and the downloadable supplier-audit pack — answers the questions QA, IT and CSV teams ask, in one place.

  • ISO 9001:2015 & ISO/IEC 27001
  • 99.99% availability
  • Your cloud, your region
  • Supplier audits welcome
Get the supplier-audit pack Security & access

At a glance

The answers auditors ask for first.

  • Your cloud, your region

    Hosted on the cloud provider you choose — AWS, Microsoft Azure, DigitalOcean or similar — in the region you choose.

  • 5-minute database backups

    Incremental database backups every 5 minutes and a full backup every night at midnight, kept for up to 30 days.

  • 99.99% availability

    Normal tickets answered within 24 hours; high-priority issues within 1–2 hours.

  • ISO 9001 & ISO 27001

    SwatTech ERP Pvt. Ltd. is certified to ISO 9001:2015 for quality and ISO/IEC 27001 for information security.

  • We don’t hold your system data

    Your Swat iQua Suite data stays in the hosting account and region you choose.

  • Audits welcome

    Remote and on-site supplier audits are welcome — we agree the date and notice period with you.

Built into the product

Controls every module inherits.

  • Multi-factor login

    Authenticator app or email code, a password policy per site, forced change at first login and on expiry, and lockout after repeated failures.

  • Role-based access

    A permission matrix per site controls every action; changes to it need their own permission and are logged.

  • Segregation of duties

    Enforced in 25 modules — for example, the person who ran a batch cannot release it.

  • Complete audit trail

    Old value, new value, user, site, time and a mandatory reason, committed with the change itself.

  • Electronic signatures

    Re-authentication at signing, with name, designation, meaning, date and time on the record; three signature levels set per module and site.

  • Trusted time

    Central time-stamps, shown in the local time of the site where the work was done.

Hosting & data

Where your data lives and how it is protected.

Hosting and data residency

Swat iQua Suite is cloud-hosted on the provider you choose — for example Amazon Web Services (AWS), Microsoft Azure or DigitalOcean — in the region you choose, so your data stays where your policies and regulators expect it to be. There are no servers for you to install or maintain on site.

Backups and retention

  • Database: incremental backups every 5 minutes, plus a full backup every night at midnight.
  • Database retention: up to 30 days of backups.
  • Files and attachments: backed up daily, with retention set to your requirements.

Availability and support

  • Availability: 99.99%.
  • Response times: within 24 hours for normal tickets; within 1–2 hours for high-priority issues.
  • Support hours: Monday to Saturday, 09:30–19:00 IST, with live-call overlap for UK and Gulf working hours and calls by appointment for the Americas.

Data export at the end of a contract

Your records are yours. Controlled PDF prints and Excel exports are available throughout the contract, and at the end of the contract we hand your data over to you.

How we build and run it

Development, incidents and continuity.

Secure development and change control

Swat iQua Suite is developed through a standard software development lifecycle:

  1. Requirements — captured, reviewed and approved.
  2. Design — reviewed against the requirements and their GxP risk.
  3. Development — under version control, with peer code review.
  4. Testing — functional and regression testing by our QA team.
  5. Staging and acceptance — verified in a staging environment before release.
  6. Release — controlled deployment with release notes, under change control.

Incident and breach notification

Security incidents that affect your system are notified to you as soon as possible, followed by the investigation, corrective actions and preventive actions — in line with the GDPR and India’s Digital Personal Data Protection Act, 2023.

Business continuity

  • 5-minute incremental and nightly full database backups, with documented restore procedures.
  • Hosting on established cloud providers with their own resilience and redundancy across data centres.
  • A documented continuity and disaster-recovery plan for our service and our people.
  • Support continuity: a team, not a single person, knows every customer’s installation.
  • A paper fallback for your plant: hybrid batch records and controlled prints let critical work continue if a system is unavailable — as EU GMP Annex 11 §16 expects you to plan for.

Privacy & quality

Data, certification and audits.

  • Client system data: SwatTech ERP does not hold your system data — it stays in the hosting account and region you choose.
  • Quality management: SwatTech ERP Pvt. Ltd. is certified to ISO 9001:2015.
  • Information security: SwatTech ERP Pvt. Ltd. is certified to ISO/IEC 27001.
  • Customer audits: remote and on-site supplier audits are welcome — we agree the date and notice period with you.

Swat iQua Suite is designed to comply with 21 CFR Part 11 and EU GMP Annex 11. Validation of your installation and your procedures remains your responsibility; we support it with a CSA requirement and traceability register and our implementation team.

Supplier-audit pack

Everything for your supplier qualification.

Enter your details and we’ll email you the pack.

Required

We email your result and use your details only to follow up if you ask us to — see our privacy notice. Nothing you enter is stored on this website.

FAQ

Frequently asked questions

Can’t find your answer? Talk to our team — we reply within one business day.

Can we audit SwatTech ERP as a supplier?

Yes. Remote and on-site supplier audits are welcome — contact us and we will agree the date and notice period with you.

Which cloud will our system run on?

The provider and region you choose — for example AWS, Microsoft Azure or DigitalOcean.

How often is our data backed up?

The database is backed up incrementally every 5 minutes, with a full backup every night at midnight and up to 30 days’ retention. Files are backed up daily, with retention set to your requirements.

What availability do you commit to?

99.99%, with responses within 24 hours for normal tickets and within 1–2 hours for high-priority issues.

Is Swat iQua Suite validated?

Validation is performed by the regulated company for its intended use. We support it with requirements traceability, Part 11 controls evidence and our implementation team.

Ready to see Swat iQua Suite in action?

Book a free, personalised demo and see how Swat iQua Suite takes your plants, labs and quality teams from paper to inspection-ready.

Download the brochure →