

OutSystems
By OutSystems
The typical implementation process for OutSystems software is designed to be efficient and streamlined, leveraging its low-code platform capabilities to accelerate the development and deployment of applications. Here’s a detailed look at the process and the estimated duration:
1. Initial Setup and Activation: Customers can activate their subscriptions and start developing applications immediately upon activation. This quick start is facilitated by OutSystems' architecture, which supports multiple deployment environments including cloud (private or public), on-premises, or hybrid setups.
Development Environment: OutSystems provides a single, integrated development environment that covers the entire application lifecycle: development, quality assurance, deployment, monitoring, and management. This environment supports rapid development and integration with existing systems and databases.
Use of Pre-built Templates and Building Blocks: Developers can utilize pre-built templates and ready-made building blocks that work across devices to build the UI of their mobile or web apps. This significantly reduces development time and effort.
Visual Modeling of Database and Integration: The platform allows for visual modeling of the application's database and easy connection to any existing data source. Developers can visually consume or expose web services or build their own connectors with custom code.
Deployment: OutSystems simplifies the deployment process, enabling applications to move from development to production with just a few clicks. The platform includes features like version tracking, dependency checking, and impact analysis to ensure smooth transitions.
OutSystems software can be extensively customized to fit specific business needs. Here are several data points that highlight its customization capabilities:
Custom Business Applications: OutSystems enables the creation of custom business applications tailored to specific organizational needs, such as internal tools for employee use or consumer-facing applications. This customization extends across various domains including CRM, sales automation, and supply chain management.
Integration Capabilities: The platform offers robust integration capabilities, allowing seamless connections with various systems and databases, including enterprise systems like SAP, Oracle, and Salesforce. This ensures that custom applications can effectively interact with existing IT ecosystems.
Modular Architecture: OutSystems supports a modular architecture, which was notably utilized by Humana to quickly adapt and reuse modules for different applications, demonstrating the platform's flexibility in meeting changing business needs.
Custom Core Systems: Organizations can build customized core systems without vendor lock-in, tailoring solutions precisely to their business requirements. This includes creating unique CRM systems, ERPs, or supply chain systems using high-performance low-code capabilities.
OutSystems offers a comprehensive training and support program for new users, which includes the following:
Guided Learning Paths: OutSystems provides structured learning experiences through guided paths that are tailored to different areas of interest and expertise levels. These paths include hands-on practice to help users gain practical experience.
Video Tutorials and Exercises: The platform offers video tutorials and exercises to facilitate self-paced learning. These resources are designed to help new users understand the OutSystems platform and start building applications.
Support Documentation: A wealth of support documentation is available to assist users in learning about the OutSystems platform and troubleshooting any issues they may encounter.
Community Forum: OutSystems has an active community forum where new users can ask questions and receive guidance from both OutSystems staff and experienced community members. This forum is a valuable resource for real-time support and knowledge sharing.
OutSystems employs a comprehensive array of security measures to protect data, ensuring robust protection across various aspects of its platform. Here are the key security measures in place:
Application Security: OutSystems applications are protected from common OWASP vulnerabilities by default, ensuring a secure runtime environment. The platform uses role-based access control to manage permissions and access within applications, enhancing security by ensuring only authorized users can make changes or access sensitive information. Static code analysis tools are employed to assess vulnerabilities in generated code, helping to maintain secure application development practices.
Network Security: OutSystems shields applications and data with advanced intrusion detection technology and employs state-of-the-art technologies such as AWS Shield and content delivery networks (CDN) to fortify against cyberattacks. All mobile applications built with OutSystems only transmit information to server endpoints over HTTPS, ensuring that communication is always encrypted.
Data Protection and Privacy: OutSystems follows stringent encryption practices for data at rest and in transit, providing a high level of data security. The platform allows customers to choose the region for their data storage, complying with data residency regulations and ensuring appropriate access controls based on data classification.
Deployment and Infrastructure Security: Applications built with OutSystems run in secure app containers with protected API endpoints to ensure secure communication between clients and browsers. The infrastructure is hosted in secure and certified data centers through Amazon Web Services (AWS), which implement multiple layers of operational and physical security.
OutSystems releases updates frequently, ensuring that their platform remains up-to-date with the latest features, security patches, and improvements. The management of these updates is structured to ensure smooth integration and minimal disruption for users. Here are the key details regarding the frequency and management of OutSystems updates:
Frequency of Updates: OutSystems releases updates regularly, with new features and improvements being rolled out continuously. The platform's update frequency is designed to keep pace with the evolving needs of developers and the broader tech landscape.
Management of Updates: Scheduled Updates: OutSystems provides a schedule for updates, which can be accessed through their Service Center. This schedule helps users prepare for upcoming changes and plan accordingly.
Update Process: The general direction for updating OutSystems components is to start with the components that have the least dependencies and move towards those with more dependencies. This strategic approach minimizes potential conflicts and ensures a smoother update process.
Automatic Upgrades: For certain types of updates, such as process upgrades, OutSystems automatically upgrades executing process instances when module process flows are modified. An impact analysis is performed to determine if instances are affected, which helps in managing the upgrade without manual intervention.
Support for Older Versions: OutSystems also manages the lifecycle of its product versions carefully. For example, they have a clear end-of-mainstream support schedule, which was announced for OutSystems 10, ensuring that users are aware of when to transition to newer versions.
OutSystems' policy on data ownership and portability is clearly outlined in their Data Processing Agreement and other related documents. Here are the key points:
Data Ownership: OutSystems ensures that the customer retains ownership of their data. This means that all personal data processed by OutSystems on behalf of the customer remains the property of the customer. The customer has full control over their data, reflecting a clear stance on data ownership that supports the customer's autonomy over their information.
Data Portability: OutSystems supports data portability, which is a critical aspect of GDPR compliance. The platform enables customers to choose the location where their environment will be provisioned, which facilitates compliance with data residency regulations. This feature is particularly important for ensuring that customers can manage their data in compliance with legal requirements.
OutSystems is committed to assisting customers with data portability requests. This includes providing support when customers need to transfer their data to another entity or service. The platform's capabilities ensure that customers can retrieve their data in a structured, commonly used, and machine-readable format, thereby supporting the GDPR's data portability requirements.
The terms for scaling up or down as organizational needs change with OutSystems are centered around the platform's scalability features, which are designed to handle growth in users, transactions, or data volumes without major disruptions or costly redevelopment. Here are the key points:
Vertical and Horizontal Scalability: OutSystems supports both vertical scalability (increasing the compute capacity of a single component, such as a server) and horizontal scalability (adding more components to distribute the load). This dual approach allows applications to scale with virtually no restrictions.
Ease of Configuration: Adding more resources to support application growth is straightforward with OutSystems. IT teams can quickly adapt to changing demands without complex procedures or extensive downtime.
Load Balancing: The OutSystems distributed architecture supports load balancing, ensuring incoming requests are evenly distributed across multiple servers. This helps prevent any single server from becoming overloaded and adds redundancy for consistent performance.
The terms and conditions for contract renewal and cancellation for OutSystems are detailed in their Master Subscription Agreement and other legal documents. Here are the data points extracted from the provided sources:
Contract Renewal Terms:
Automatic Renewal: The Subscription Term shall automatically renew for additional periods equal to the Initial Subscription Term unless otherwise specified in the applicable Order. The renewal will maintain the same product configuration and quantity initially ordered, and the renewal fees will be set forth in the Order.
Renewal Notification: Customers are required to notify OutSystems of their intent not to renew at least 30 days before the end of the current Subscription Term.
Cancellation Terms:
Termination for Cause: Both parties have the right to terminate the agreement for cause, such as a material breach that is not cured within a specified period.
Termination for Insolvency: The agreement can be terminated if either party becomes insolvent or enters into liquidation or similar proceedings.
Refunds upon Termination: If the customer terminates the agreement for cause, OutSystems shall refund any prepaid fees covering the remainder of the Subscription Term from the effective date of termination, calculated on a straight-line basis.
Post-Termination Data Access: Following termination, OutSystems will make the customer's content available for export and download by the customer for a period of 30 days, subject to the payment of all fees owed under the agreement.
Additional Terms:
Service Changes: Customers with a valid and active subscription can request service changes that may be available depending on their product configuration.
OutSystems software meets a broad range of compliance standards, ensuring adherence to industry regulations and best practices for security and data protection. Here are the compliance standards that OutSystems is certified in:
SOC 2 Type II: This standard relates to the controls at a service organization relevant to security, availability, processing integrity, confidentiality, and privacy.
ISO 27001: An international standard for managing information security.
ISO 22301: This standard specifies requirements to plan, establish, implement, operate, monitor, review, maintain, and continually improve a documented management system to protect against, reduce the likelihood of occurrence, prepare for, respond to, and recover from disruptive incidents when they arise[1].
HIPAA: The Health Insurance Portability and Accountability Act sets the standard for protecting sensitive patient data in the United States.