A secure customer portal for distributing firmware, documentation and certifications with full traceability.
Arcol designs and manufactures vision systems for industrial vehicles: its eMirror units replace the mirrors on buses and trucks with cameras and screens. Its customers are manufacturers that need the firmware, documentation and certifications of each model, always in the right version. Arcol needed to stop distributing sensitive files by email and be able to prove who had received each delivery.
- Client
- Arcol
- Industry
- Automotive, vision systems for buses and trucks
- Services
- Software development, Cloud and operations
- Technologies
- Portal web, Base de datos, Almacenamiento cifrado, Antivirus en subida, MFA, Registro de actividad, ISO/SAE 21434
The challenge
Every new firmware version and every certification was sent by email, customer by customer. Emails multiplied, attachments grew and nobody could guarantee which version each manufacturer had or who had accessed each file.
The sector's cybersecurity standard, ISO/SAE 21434, demands precisely the opposite: traceability of every delivery and access control per customer. What was needed was a portal that was convenient for the manufacturer and defensible in front of an auditor.
Our approach
Each customer signs in by invitation, with two-factor authentication, and sees only its eMirror products and the categories Arcol has granted: firmware, documents, designs, certifications, configurations and tools. Permissions are managed from a single matrix per customer, product and category.
Arcol uploads the file, sets product, category and version, and decides which customers can see it. Each affected customer receives the new-version alert in the portal and by email, according to its preferences.
Every upload goes through antivirus before publishing. Files are stored encrypted in a private space and served only through temporary links; no file is reachable by direct URL.
Every sign-in, invitation, publication and download is recorded with user, file, version, date and IP address: the traceability evidence the standard requires. The portal is available in Spanish and English, with search and filters, and is deployed in containers with daily backups.
- 01.
A private space for each manufacturer
- 02.
Single publication with alerts to the affected customers
- 03.
Protection of sensitive files
- 04.
Activity log for audit
The impact
Firmware, executables and certifications are published once. Each manufacturer downloads the right version when it needs it, without email chains.
Who downloaded what, when and from where is recorded automatically. Arcol can answer an auditor in seconds.
A manufacturer never accesses another's material. A permission is changed in one click and applies instantly.
Activity log, encrypted downloads and antivirus on every upload, aligned with ISO/SAE 21434.
- 01.
An end to distribution by email
- 02.
Full traceability with no manual work
- 03.
Isolation between customers
- 04.
Demonstrable compliance
Project results
Portal for every customer, with permissions per product and category
1
File categories: firmware, documents, designs, certifications, configurations and tools
6
Of downloads logged with who, what and when
100%
Related case studies
View all case studies
HANGAR
A ticketing and QR access-control platform of its own that validates every ticket in under a second and does away with third-party platforms.
Grupo Pomona Iberia
A Business Intelligence platform that consolidates the sales and purchases of four companies into a single model, refreshed every day.
ASDT Corporation
A drone detection system with its own maps and remote updates for a fleet of more than 500 units.