Sage One review - first of many

I'm definitely not an impartial observer in pointing this out (as Receipt Bank integrates with a number of the online accounting / bookkeeping solutions) but I would like to see a mention of the presence / breadth of a public API in future reviews.

I believe that this is important because it is both:

1) an indicator of the potential of the solution - i.e. can it be linked to accounts prodution software, CRM systems, etc

2) an indicator of the commitment of the vendor to data portability - i.e. will you be able to move your/your clients data in the future if you would so wish.

Regards,

Michael

There is no API for SageOne.

As a registered Sage Developer, I asked as soon as the product was announced and was told there were no current plans to make an API available.  Sage only made an Instant API available 2 years ago despite having one for Sage 50 for over 15 years so it may be a long wait...

John  

In your course Defending Investigations 101, rule number one that is drilled into you as soon as you can walk is not to provide HMRC with more information than they have requested and to which they are entitled under statute.  *OR* if you decide to volunteer additional information over and above that which has been requested, and there may be strategic reasons for doing so, then maintain control over that information to prevent additional leakage beyond the planned disclosure.

One might be forgiven for "forgetting" this principle if you are trying to modernise an existing product already riddled with spaghetti code.  But here we have a product designed from scratch and built from the ground up, and yet they have built in absolutely no provision to enable the taxpayer to restrict HMRC's access to data relating to the period under enquiry in the event of an audit.  And this despite their publicity machine waxing lyrical about how security conscious they have been.

With kind regards

Clint Westwood

A constructive criticism that is not just levelled at Sage One, is that it is accessible by just email address and password.  SSL encryption is good, but will not stop keyboard logging software.  Every system of this sort, in my opinion should be front ended by a minimum of a 2 factor authentication system.

It is very easy to track and replay user access credentials without the injured party knowing.  A 2 factor security system such as those used for online banking will give you peace of mind that even if your computer is compromised, the connection credentials cannot be replayed.  All online providers who enable professional service based companies to store customer data, should provide secure access as standard.

Moyle Baker

TEqLOGIC

 Hi Moyle,

Have you seen the KashFlow log in process? Key logging software would get you in as there is an extra step involving selecting letters from a drop down list, as used by some internet banking.

Key logging can't record that, which is exactly why it's there

... just asks me to enter three characters from the full password, which vary at random at each login.  I think that this is intended to combat keylogging, although it seems to me that if the logger has a long enough log report he will get the full password.  Even so, it is better than nothing.

With kind regards

Clint Westwood

Key Logging...

I would suggest that a template for a reasonable anti-key logging system should have:

1. An independent security system not linked to the desired service 
2. username and password (hashed out) text boxes
3. 3 drop down boxes and
4. all delivered over an SSL connection
5. 3 attempts, with the originating IP address blocked on failure 3 (permanently, unless administratively cleared)

The recent RSA two factor system breach, shows that no system is impenetrable, however we can but try.

Moyle

Hi johndon68,

I'm pleased to say that we launched a Sage One API on 7th December 2012 so if you're interested you can find out more at http://uk.sageone.com/blog/2012/12/07/sage-one-partner-programme/ 

Thanks

Paul Lancaster
SEO & Inbound Marketing Specialist
Sage One UK
http://uk.sageone.com/blog

FAO anyone reading this, I just wanted to add that we do read all the reviews and comments people write about Sage One online and listen to all the feedback which we take on board for future developments and iterations.

Sage is a FTSE-100 company with over 830,000 business customers in the UK but our cloud-based Sage One software is still in relative infancy. Other cloud-based software providers have a few years head start on us but we're catching up fast.

If you want to follow our progress, read my blog '5 ways to engage with Sage One UK'.

Thanks

Paul Lancaster
SEO & Inbound Marketing Specialist
Sage One UK
http://uk.sageone.com/blog