InsiderQ is a web application that a listed entity, intermediary or fiduciary installs and runs on infrastructure it controls. This page sets out what it needs to run on, and the three ways that infrastructure can be arranged.
Whichever arrangement you choose, the structured digital database is maintained by you, internally, on a server you control through credentials only you hold. Naapbooks Limited does not maintain the database and holds no credential permitting access to it. The Data Custody and Access statement sets this out in full and explains how to verify it.
Recommended configuration
| Component | Minimum | Recommended |
|---|---|---|
| Operating system | Ubuntu LTS, Windows 10, or Windows Server 2016 and above | Ubuntu LTS or Windows Server 2019 and above |
| Processor | Intel Core i5, 9th generation or above | Intel Core i7, 11th generation or above |
| Memory | 4 GB RAM | 8 GB RAM |
| Disk space | 30 GB free | 100 GB free |
| Web server | IIS 8 or above, or Nginx | Nginx |
| Database | MySQL Server 8 or above | MySQL Server 8 or above |
| Runtime | Node.js 18 or above | Node.js 18 or above |
Also required
- A static IP address, so that access is consistent and can be restricted by policy.
- SMTP credentials on your own mail service, for notifications and alerts. Mail is sent from your domain, through your server; Naapbooks does not relay it.
- A TLS certificate for the hostname your users will reach.
The sizing above suits most designated-person counts. Where your designated-person and connected-person population runs into the thousands, or where you expect heavy concurrent use around results, tell us at the outset and we will size accordingly.
Installation artefacts
A release consists of three files: the database file, the API build and the UI build. Naapbooks supplies them and will install them, or will hand them to your IT team with the installation guide. Prerequisite software — web server, MySQL, Node.js — can be installed by your team, or by Naapbooks as a chargeable service.
Where it can run
Three arrangements. The software is identical in all three, and so is the custody position — only who buys and holds the hardware changes.
| Option | How it works | Charge | Who holds the credentials |
|---|---|---|---|
| A. Your own premises | You install on your own server, in your own data centre or office. | No charge from Naapbooks beyond installation assistance | You, throughout |
| B. Your own cloud tenancy | You install in your own AWS, Google Cloud, Azure or other account. | No charge from Naapbooks beyond installation assistance | You, throughout — the tenancy and billing are yours |
| C. Infrastructure facilitated by Naapbooks | Naapbooks provisions a dedicated server or VPS on your behalf, installs the stack, and hands over every credential at go-live. | Quoted with your licence | You, from handover. Naapbooks retains none. The account can be transferred into your name at any time at no charge. |
It is a procurement convenience for organisations without server capacity — not a managed service, and not vendor hosting. Naapbooks provisions the infrastructure and then steps out of it, with a 99.5% monthly availability commitment. If your compliance policy prefers that Naapbooks has no relationship with the infrastructure at all, take option A or B; nothing about the software changes.
Cloud sizing guidance
Google Cloud
| Property | Option 1 | Option 2 |
|---|---|---|
| Machine type | e2-standard-2 | e2-standard-4 |
| vCPU | 2 | 4 |
| Memory | 8 GB | 16 GB |
| Persistent disk | 30 GB, customisable | 30 GB, customisable |
| External IP | Reserve a static address | Reserve a static address |
Amazon Web Services
| Property | Option 1 | Option 2 |
|---|---|---|
| Instance type | t3a.medium | m6a.large |
| vCPU | 2 | 2 |
| Memory | 4 GB | 8 GB |
| Storage | 30 GB, customisable | 30 GB, customisable |
| External IP | Allocate an Elastic IP | Allocate an Elastic IP |
Applies to either
- Boot disk. Choose the operating system and size; 30 GB SSD or standard persistent disk is the default.
- Firewall. Open 443 for HTTPS, and 80 only if you redirect to HTTPS. Restrict administrative ports to your own ranges.
- IAM. Assign roles through service accounts rather than shared logins.
- SMTP. Required for notifications, on your own mail service.
Notes on cloud billing
Where you run in your own tenancy, you contract directly with the cloud provider and the following apply to you.
- Consumption-based pricing. Compute, storage and network are billed on usage, with no upfront capital cost.
- Compute charges vary by instance type, region and operating system. Auto-scaling is available but rarely needed at this workload.
- Storage is charged on volume and duration; access and retrieval operations may carry additional charges on lower-cost tiers.
- Egress bandwidth is usually charged; inbound is usually not. InsiderQ’s egress is small.
Retention under Regulation 3(6) runs for not less than eight years after completion of the relevant transactions, and longer where SEBI opens proceedings. Size storage for that horizon rather than for the first year.
What to give your IT team
A short brief covering: the server specification above; the three installation artefacts; the SMTP details; the static IP and hostname; the firewall policy; and the credential handover process, under which your team takes root, database and application administrator accounts at go-live and rotates them immediately. Naapbooks will run the installation with your team on the call.
Questions about any of this? We answer them from the compliance officer’s side of the table, not the sales side.
Talk to usVersion 3.0 · effective 3rd May 2025. Supersedes v2.2.
Read with the Data Custody and Access statement, the Service Levels and the Terms and Conditions.