Platform & Security
Built on Microsoft.
Designed for Manufacturing IT.
ClearVue runs on Microsoft Azure, SQL Server and .NET, the stack most manufacturing IT teams already know. Nothing is installed on your network except the optional ERP connector, and we will walk your security reviewer through the architecture.
Technology Foundation
Application
.NET / ASP.NET Core
Microsoft's enterprise application framework.
Blazor WebAssembly
Rich, responsive browser-based UI with no plugin installs required.
Clean Architecture
Layered codebase with strict separation of concerns — maintainable, testable, extensible.
Infrastructure
Microsoft Azure
Hosted on Azure — the cloud platform most manufacturing IT teams already trust and manage.
Azure SQL Database
Enterprise-grade relational database with automatic backups and point-in-time restore.
Azure Blob Storage
Secure, scalable document and file storage with tenant-isolated directory structure.
Security & Identity
Role-Based Access Control
Granular permissions assigned by role — control exactly who can view, approve, or edit.
JWT Authentication + 2FA
Industry-standard token authentication with optional two-factor authentication for all users.
HttpOnly Refresh Tokens
Tokens stored in secure HttpOnly cookies, inaccessible to JavaScript — protection against XSS attacks.
Data Integrity
Audit Trail on Every Record
Every create, update, and approval is timestamped with the acting user. Completed inspections and audit records are also hash-chained, so a later change to one is detectable.
Optimistic Concurrency
Prevents data corruption when multiple users edit the same record simultaneously.
Soft Delete & Version History
Records are never destroyed — full history retained for compliance and audit purposes.
Multi-Tenant Data Isolation
Each tenant is logically isolated — enforced by framework-level query filters plus tenant stamping, and covered by automated cross-tenant isolation tests.
Every action. Every user. Every timestamp.
ClearVue records who did what, and when, on every document approval, workflow step, inspection and change. Completed inspections and audit records are hash-chained as well, so tampering after the fact is detectable. When an auditor asks "prove it," you can — in seconds.
Who
Full name and role of every acting user
What
Exact action taken and field-level changes
When
UTC timestamp on every event, permanent record
ERP Integration
Your ERP data, read live — no copy kept in ClearVue.
ClearVue reads product data straight from your ERP the moment you need it, then shows it beside the quality documents that govern that part. ClearVue doesn't keep a copy of your ERP data — your system of record stays the source of truth.
Part number in, cover sheet out
Enter a part number and see its product cover sheet — header, bill of materials, and routing — pulled live from your ERP the moment you ask. Print it, or save it as a PDF.
ERP detail beside your documents
That live cover sheet sits next to the controlled ClearVue documents tied to the same part — one place to go from a part number to both its ERP detail and its quality records.
Read on request
ClearVue reads bills of materials and routings from your ERP when someone asks. ERP values are kept only on a document you generate — a cover sheet you print or save as a PDF — which is stored with your reports. Integration jobs record counts, not data.
Outbound-only, read-only
A lightweight connector on your side dials out to ClearVue — no inbound firewall openings, and no write path back into your ERP.
The first connector is for QAD MFG/PRO, built on an extensible framework so additional systems can follow.
Azure-Native by Design
Your quality data stays inside our Azure boundary.
ClearVue is delivered as a fully managed SaaS running in Microsoft Azure. Grounding, storage, and processing happen inside our Azure environment — not routed through third-party APIs. That's a difference your security review can verify.
In-boundary
Your data is stored and processed inside our Azure environment — not handed to outside data processors for your core compliance data.
Never trains AI
Your quality data is never used to train AI models and is never shared across customers.
Residency options
Regional data-residency is available for Enterprise and regulated deployments where your compliance obligations require it.
Isolation That Scales With Your Compliance Needs
Isolation isn't all-or-nothing. ClearVue offers an assurance ladder — every tenant starts logically isolated, and regulated buyers can step up to a dedicated database or a fully single-tenant environment without changing platforms.
Logical Isolation
IncludedEvery plan
Your data lives in our secured Azure environment, separated from every other tenant by framework-enforced query filters and tenant stamping — and verified by an automated cross-tenant isolation test suite.
The standard for most manufacturers.
Dedicated Database
By designEnterprise / contract
Your own dedicated database inside our Azure environment, separate from every other customer's. ClearVue is designed to run this way, and we set it up as part of an Enterprise agreement.
For buyers whose security review requires provable separation.
Dedicated Environment
On requestEnterprise / contract
A fully isolated, single-tenant deployment with regional data-residency options — your quality data stays in the region and boundary your compliance obligations require.
For programs with single-tenant or data-residency requirements.
The on-premises Integration Hub connector runs inside your network to reach your ERP (QAD MFG/PRO today); the ClearVue application itself is delivered as managed Azure SaaS.
Security Checklist for IT
Single sign-on with Microsoft Entra ID is on our roadmap. It is not available yet.
Questions for your IT team?
We're happy to walk through architecture, security, and integration details with your technical stakeholders.
Request a Technical Demo