Prophix Software

• Subscription Fees: Prophix typically uses a subscription pricing model. Costs often start around $3,000 per month, with average annual costs near $205,000, depending on the number of users, modules, and specific business requirements.

• Setup and Implementation Fees: Initial setup, configuration, training, and consulting services are usually billed separately from the subscription fee. These costs depend on the complexity and scope of your implementation.

• Custom Development and Consulting: Any special customization, integration, or consulting work beyond standard setup is charged as an additional service, often on a project or hourly basis.

• Maintenance and Standard Support: Standard software maintenance—including updates, bug fixes, and basic support—is generally included in the subscription fee.

• Premium Support Options: Enhanced support packages, such as 24/7 assistance or dedicated account management, may be available for an additional charge.

• User and Server Licenses: The subscription fee is based on the number of users and servers. Adding more users or servers will increase the overall cost.

Prophix provides a broad range of training and support resources to ensure new users are well-equipped to use the software effectively:

• Prophix Academy: This is the main training hub, offering self-paced online courses, live instructor-led sessions, and blended learning options. Training covers all key topics, including administration, reporting, budgeting, data integration, dashboard creation, and troubleshooting. Users can also pursue certification programs to validate their skills.

• Flexible Learning Formats: Users can access training at their own pace, repeat lessons as needed, or join interactive virtual classes for hands-on practice and real-time Q&A.

• Onsite and Remote Training: Instructor-led training can be delivered at Prophix headquarters, remotely, or at the customer’s location for a more tailored experience.

• Workshops and Webinars: Regular sessions focus on specific topics like budgeting, reporting, and financial consolidation, with opportunities for interactive demonstrations and questions.

• Comprehensive Documentation: Detailed user guides, help documentation, and a searchable knowledge base are available directly within the software and through a dedicated portal.

• Support Channels:
  • Email and online ticketing system for submitting and tracking support requests
  • Phone support during business hours
  • Onsite support available for an additional fee

  • Multiple support tiers, including standard, premium (with faster response times), and enterprise (24/7 support and dedicated representatives)

• Certification: Users can earn certifications to demonstrate their proficiency and expertise with Prophix.

Prophix employs robust security practices to protect customer data:

• Industry Certifications: Prophix’s cloud services are certified to international information security standards, such as ISO/IEC 27001:2013.
• Authentication and Access Control:
  • Multi-factor authentication (MFA) is required for all users.
  • Role-based access control (RBAC) allows administrators to assign precise permissions to users and groups, restricting access to sensitive data.

  • Single sign-on (SSO) integration with Microsoft Active Directory is available for streamlined authentication.

• Password Policies: Strong password requirements are enforced, with policies for password expiration, lockouts after failed attempts, and prevention of password reuse.

• Data Security:
  • File-level and model-level security settings restrict access to confidential information.
  • Data can be secured at a granular level, with permissions set for individual users or groups and for specific types of access (read or write).

  • Data is stored securely in SQL Server and Analysis Services databases, with permissions enforced at the database level.

• Network Security: All data transmitted between client and server is encrypted using SSL, ensuring secure communications.

• Availability and Backups: Cloud services offer high availability, with service level agreements and regular backups to ensure business continuity.

• Audit and Monitoring: The system includes auditing and monitoring tools to track access and changes, supporting compliance and traceability.

• Update Frequency: Prophix releases updates regularly, which include new features, improvements, and bug fixes. Each update is accompanied by detailed release notes.

• Cloud Maintenance: For cloud customers, updates and maintenance are managed by Prophix. Users receive advance notifications through system messages and email, allowing them to prepare for scheduled maintenance.

• Cumulative Builds: Updates are cumulative, so each new release includes all previous fixes and enhancements, ensuring systems remain current and stable.

• Update Management: Cloud updates are handled automatically by Prophix, minimizing disruption. On-premises customers may need to coordinate updates with their IT teams.

• User Communication: Users are always informed ahead of planned updates, both within the application and via email, to prevent workflow interruptions.

Data Ownership:
Prophix’s policy is that the customer retains full responsibility and ownership of all data they input and manage within the software. Customers are solely responsible for the accuracy, quality, integrity, legality, reliability, appropriateness, and ownership of all rights in their data and content. Prophix acts as a processor or service provider, storing and processing data on the customer’s behalf, but does not claim ownership over customer data.

Data Portability:
Customers have the right to request a copy of their data in a structured, commonly used, and machine-readable format. This enables organizations to export their data and, if desired, transmit it to another service provider. Upon termination of the service, Prophix will make customer data available for retrieval for a defined period (typically up to 30 days). After this window, Prophix will delete or anonymize the data unless retention is required by law.

Data Access and Rights:
Customers can request access to their data, corrections, deletions, or restrictions on processing, and can object to certain uses. Prophix will cooperate with customers’ reasonable requests regarding data access, portability, and compliance with privacy regulations.

International Transfers:
If data is transferred internationally, Prophix ensures that adequate safeguards are in place, such as standard contractual clauses or compliance with international data protection frameworks, to maintain data protection standards.

Scalability:
Prophix is designed to be highly scalable, supporting both scaling up (adding resources, users, or functionality) and scaling down (reducing usage or resources) as organizational needs change. The cloud-native architecture allows for dynamic allocation of computing resources such as CPU, memory, and storage, ensuring consistent performance even during periods of high demand or large-scale deployments.

Resource Allocation:
Resources are allocated independently for each customer, so performance is not affected by other users. The system can automatically adjust resources based on workload and demand, providing flexibility for budgeting cycles, forecasting, or business growth.

Contractual Terms for Scaling:
Customers can modify their subscription to add or remove users, modules, or features as needed. Fee adjustments are typically made in line with changes in usage or resource allocation. Annual fee increases may apply, often tied to inflation indices plus a fixed percentage, with advance notice provided to customers.

Renewal and Termination:
Subscriptions generally renew automatically unless notice is given. Upon termination, customers lose access to the service, but Prophix provides a period (usually 30 days) to retrieve their data before it is deleted.

Contract Renewal:

• Prophix contracts typically have an initial term (often one or three years). After this period, contracts usually auto-renew for additional one-year terms unless either party provides written notice of non-renewal.
• Customers are generally required to give written notice of their intent not to renew at least 45 to 60 days before the contract’s end date. Prophix may also provide non-renewal notice, usually 60 to 90 days in advance.
• Upon renewal, Prophix may adjust fees, often by the rate of the Consumer Price Index (CPI) plus a fixed percentage (such as 2%). Customers are notified of any fee increases at least 60 days before renewal.

• If no notice is given, the contract continues under the same terms for the next period, except for any updated pricing.

Contract Cancellation and Termination:

• Once an order is signed, it is generally non-cancellable and fees paid are non-refundable, unless otherwise specified in the agreement.
• Either party can terminate the contract for material breach if the breach is not remedied within 30 days of written notice. Some breaches may result in immediate termination if they cannot be cured.
• Prophix can suspend or terminate access if there is a significant security or operational threat, or if the customer breaches the agreement. Prophix will try to notify the customer and restore service once the issue is resolved.
• Either party may terminate immediately if the other party becomes insolvent, files for bankruptcy, or ceases operations.
• Upon termination, customers must stop using the software and destroy or return all copies. All fees accrued up to the termination date must be paid. If Prophix terminates for customer breach, all remaining fees for the term become due immediately. If the customer terminates due to Prophix’s breach, a prorated refund may be issued for any unused prepaid service.
• After expiration or termination, customers generally have up to 30 days to retrieve their data before it is deleted or becomes inaccessible.

Prophix Software adheres to a wide range of industry and international compliance standards, including:

• GDPR (General Data Protection Regulation): Ensures data privacy and protection for individuals in the European Union.

• SOX (Sarbanes-Oxley Act): Supports compliance with financial reporting and internal controls for public companies.

• GAAP (Generally Accepted Accounting Principles): Facilitates compliance with standard accounting rules.

• CCPA (California Consumer Privacy Act): Addresses data privacy rights for California residents.

• ESG (Environmental, Social, and Governance): Supports sustainability and governance reporting requirements.

• IFRS 16: Assists with international accounting standards, especially for lease accounting.

• ISO/IEC 27001:2013: International certification for information security management.

• SOC 2: Certification for controls related to security, availability, confidentiality, processing integrity, and privacy.

• ISAE 3402: Assurance standard for service organizations.

• CSA Level 1 (Cloud Security Alliance): Certification for cloud security best practices.

• HITRUST r2 Certification: Comprehensive certification covering security and privacy requirements, including elements from NIST and other frameworks.