Frequently Asked Questions (FAQ)
Find answers to common questions about C&C Solutions software, iTwin integrations, security standards, data privacy, and subscription licensing.
Are you ISO 27001 certified?
No, we are not ISO 27001 certified, but our platform and architecture strictly follow ISO 27001 security and data protection best practices:
- Architecture & Segregation (A.6 / A.11): Multi-tier cloud architecture with Web Application Firewall (WAF), Content Delivery Network (CDN), server-side API abstraction, and service network isolation.
- Access Control (A.9): Centralized OpenID Connect (OIDC) and Single Sign-On (SSO) authentication using official Bentley Identity Management System (IMS) with granular role-based entitlements.
- Secure Development (A.14): Secure Software Development Life Cycle (SDLC) with strict code reviews, CI/CD automated gates, TypeScript static typing, unit & integration test suites, and software composition analysis (SCA) dependency checks.
- Operations & Incident Response (A.12 / A.16): End-to-end TLS 1.3 encryption, strict Content Security Policies (CSP), CORS protection, secure HTTP response headers, and centralized telemetry monitoring.
- Data Protection (A.8 / A.10): AES-256 encryption in transit and at rest, parameterized database queries, and input validation to eliminate injection vulnerabilities.
- Third-Party Services (A.15): Governed utilization of Bentley iTwin platform APIs, isolated PostgreSQL and MongoDB database persistence layers.
What is your data access and privacy policy?
We enforce strict data access and privacy policies to protect the confidentiality and integrity of your engineering information.
- All stored model configurations and index parameters are ring-fenced within project-specific iTwin access wrappers and are inaccessible to unauthorized external tenants.
- We do not share customer data with third parties without your explicit consent.
- For complete technical specifications, review our Architecture - Data Access & Privacy Report.
Are you just "another" Solibri clone?
No. Solibri primarily focuses on static desktop-based IFC rule checking. Our cloud-native iTwin applications operate directly on live federated digital twins in the cloud. We provide instant property discovery, statutory BS 8644 Golden Thread audits, custom ecSQL validation pipelines, and automated cross-changeset trend analysis that cannot be replicated in traditional desktop viewers.
How do I get your software?
All C&C Solutions software provides a free tier. Simply navigate to the application (e.g. https://index.itwin.app) and sign in using your Bentley IMS account. Your account is automatically registered on first login.
What licensing options are available?
We offer flexible licensing models tailored to individual practitioners and enterprise delivery teams:
- User Licensing: Named user access with full authoring and export capabilities.
- iTwin Project Licensing: Project-wide license enabling all team members on an iTwin to calculate, audit, and raise issues.
- Domain Enterprise Licensing: Unrestricted enterprise access across all corporate email accounts within your domain.
- Contact our sales team for enterprise pricing: info@candcsolutions.co.uk.
Do you offer technical support?
Yes. We offer prioritized technical support with an 8-hour target response time for active subscribers.
Where are your servers located?
All our primary production servers, databases, and container workloads are hosted in the United Kingdom. We operate a distributed multi-tier architecture capable of regional deployment where customer data residency requirements dictate.