Security and data
Where your project data lives
Last updated: 3 November 2026
Schedules, costs and models are commercial information. Stratum 4D is built so that you decide where they are kept. This page explains each way to use it, so your IT team can choose.
Ways to run Stratum 4D
| Option | Where the data is | Who can open it |
|---|---|---|
| Desktop app (Windows, macOS, Linux) | A database file on the user's own computer | That user |
| Shared folder | Your company's Google Drive or OneDrive folder | People your company gives access to the folder |
| Stratum Server | A PostgreSQL database on your server or private cloud | Signed-in users, by role (admin, planner, viewer) |
| Web demo | Sample projects only, for one browser session | The visitor; removed after a day without use |
In none of these options are your projects sent to Miqyas Labs.
Desktop app
- Works with no internet connection. Projects are in a local database file that you can back up like any other file.
- Connects to Primavera P6 EPPM or the P6 database directly from the user's computer, inside your network.
- Sign-in to a shared Google Drive or OneDrive folder uses the provider's own sign-in page. The sign-in token is kept in the operating system's key store.
- The installers are not yet code-signed. Windows and macOS ask the user to confirm the first time the app opens. Signed installers are planned.
Stratum Server
- Runs in your data centre or private cloud with Docker and PostgreSQL. You control the network, backups and retention.
- Users sign in with roles. Every save makes a new version, and a save never overwrites changes that someone else made in the meantime.
- An audit log records every sign-in and every change. Each entry is chained to the one before it, so a changed or removed entry shows when the log is verified. The database refuses edits to it, and it can be exported for an auditor.
- Sending progress to Primavera P6 waits for an admin's approval by default, with an optional two-person rule. The approver approves exactly the content that will be sent.
- Repeated wrong passwords lock the sign-in for 15 minutes. A new password or role ends the user's other sessions at once.
- Scheduled email reports go through your own mail server.
AI assistants (MCP)
The optional MCP server runs on the user's computer and reads only the files and the database that the user points it at. The assistant application shows each tool call before it runs. The server also keeps its own chained log of every tool call, can run read-only or be limited to chosen folders, and tells the assistant that text from schedule files is data, not instructions. The assistant application itself sends the user's questions and the tool results to its AI service, so follow your company's rules before you use it with project data.
The web demo
- Each visitor gets a copy of six fictional sample projects for one browser session. A new tab, a new visit or Sign out starts again with fresh samples.
- Session data is kept on our Cloudflare account or in the visitor's browser, and removed after a day without use.
- Do not upload confidential schedules to the demo. Use the desktop app for real projects.
This website
- The site is served by Cloudflare over HTTPS.
- Visitor statistics are counted without cookies.
- Details sent with the contact form are stored on our Cloudflare account and used only to answer you. See the privacy policy.
Questions from your IT or security team
We can answer security questionnaires and help to install Stratum Server inside your network. Contact us.