Your nursery's data, in South Africa, under your control.
OperoNMS is built for organisations whose auditors ask hard questions. Your data is hosted in Cape Town, kept apart from every other customer's, opened only by the people your roles allow, and every change is on the record.
AWS Cape Town
Production data is hosted in af-south-1.
Your own address
yournursery.operonms.co.za, for your people only.
Staff access, stated plainly
No routine access through the application. How our staff can reach your data.
Activity Log
Everything people did, from every area, in one list.
Hosted in South Africa, run for you.
OperoNMS runs on Amazon Web Services in the Cape Town region (af-south-1). Production data is stored there. All traffic reaches it through Cloudflare's global network, which decrypts it to protect the service, and our mailboxes are with Microsoft, so some information can pass outside South Africa. There is no server to install, patch or back up on your site.
- Managed PostgreSQL databases with point-in-time backups
- Exports encrypted with managed keys; sign-in secrets and second-factor seeds encrypted in the application
- Request rate limits in every service, so nobody can hammer sign-in or exports
Every organisation is walled off, twice.
OperoNMS serves many nursery organisations, and none of them can see another's data. Every request is filtered by the organisation in the verified sign-in, and the database itself enforces the same wall with row-level security, denying by default.
Your company account, or a strong password and a second factor.
Sign in with your organisation
Microsoft Entra ID, Okta, Google Workspace or any OpenID Connect provider. Your email domains are verified by DNS, groups map to roles, and one or two emergency local administrators keep the lights on if your provider is down.
Strong passwords
At least 12 characters, checked against known breached-password lists, stored with Argon2id. Passphrases encouraged.
Second factor
An authenticator-app code with one-time recovery codes.
Hard to guess at
Ten failed attempts lock an account for 15 minutes, and every failure gets the same answer, so nobody can tell which accounts exist.
Sessions that end
Lock the screen with one click or automatically after 5, 15 or 30 minutes. A reload keeps your session; closing the tab ends it. Managers can see and end any session.
Customers sign in separately
Portal users have their own accounts, limited to their own organisation's orders and plantations.
What your auditors expect, built in.
Detailed permissions in 16 ready-made roles that you can adjust, or build your own. Grant a role for every nursery, or named nurseries, read-and-write or read-only, with a preview of exactly what it adds and removes and a reason recorded. Time-limited direct grants need an end date.
- You can't grant yourself anything, or grant what you don't hold
- You can't grant beyond your nurseries, or upgrade read-only to write
- High-risk permissions can't be granted directly
- Nothing is deleted: accounts are suspended or decommissioned
| Decision | Who may make it |
|---|---|
| Release a batch or accept a proposal | Nursery manager, general manager |
| Accept or re-allocate an order | Nursery manager |
| Write off an order | Nursery manager, general manager |
| Dispatch under concession | Nursery manager |
| Publish the order cycle | Divisional nurseries manager, general manager |
| Change prices | Divisional nurseries manager, general manager |
| Administer users | Divisional nurseries manager, general manager, system administrator |
Wherever one person records and another approves, OperoNMS insists they are different people.
Who changed what, when, and why.
Administration → Activity Log lists everything people did, from every area of the system, newest first, filterable by area, dates and person. Released recipes and plans never change; records are corrected, never overwritten; every download is recorded.
- Role grants with their reasons and previews
- Every approval, release, write-off and reversal
- Every Excel, PDF or CSV export
- Audit records are kept, with no automatic deletion yet
How our staff can reach your data.
OperoSystems staff have no routine access to your nursery's records through the application. The console shows operational facts about your organisation, such as its contact, health and usage counts.
Support access is built to need your approval, for one case and a limited time. It isn't switched on in production yet.
For a production emergency when nobody at your nursery can be reached, time-limited emergency access exists, and your administrators are told at once. Those who administer our AWS account can in principle reach the database and files, and that access is used only to run the system.
- Our own staff sign in with company accounts and a second factor
- Our staff's own trail is tamper-evident
Personal information handled the way the Act expects.
OperoNMS holds little personal information: your staff's names and contacts, your customers' contacts, and who recorded what. What it holds, it limits and can export.
Retention
Retention periods will be published with our full privacy notice. Automatic deletion isn't switched on yet.
Export
Your whole organisation's data can be exported in an open format, encrypted, for your records or when you leave.
Erasure
On written request, a person's identifying details can be replaced with a pseudonym while operational records stay consistent. Some fields aren't covered yet, and we'll tell you which.
Minimal by design
No field asks for wages, HR records or ID numbers. Notes and photos are free-form, so keep such details out of them.
Offline doesn't mean unaccountable.
Capture tablets are owned by the nursery and enrolled by a site manager. Each has its own signing key that cannot be copied off it. Every capture is signed, with its quantity inside the signature, so it cannot be changed after it was taken.
- Offline sign-in with a six-digit personal PIN; trivial PINs refused
- Waits after three wrong PINs, a person locked at five, the tablet at twenty in a day
- Every capture says how its person was identified: online, or by PIN
- A capture by someone whose access was withdrawn is flagged for review, and nobody reviews their own
Be one of our first pilot nurseries.
We work closely with a small group of nurseries to set up OperoNMS on their sites. You get hands-on setup and training, your own nursery's layout and recipes loaded with you, and a direct say in what we build next.