The Dirty Truth AboutAny Taxi Software

That You Don't Know !

03/10

01IS IT BUSINESSREADY?

02IS IT EASY TO HACKYOUR BUSINESS?

03DO YOU REALLYOWN IT?

Not all running software you see can beused in a real business environment. Will cease running even when a fewthousand users onboard.

Beware! A novice hacker can bring downyour software easily. Ask your developer if 'DRACONIANSECUIRTY' is implemented.

Note: If not coded in a certain globalstandard. You would need to depend onthe developer for any changes in future. This is a common trick used bycompanies to control the customer.

01IS IT BUSINESS READY?

Read this disturbing review by Thomas from Adelaide, Australia " ...well finally after speaking to atleast 6 different vendors, I decided to choose the Taxi Dispatch Software from this company [ name removed ]. I do a free trial run. The demo ran smooth, seemed to have all the features. I tested it inside-out and everything seemed fine. So, I went ahead and made the purchase. I spent good on marketing and on-boarded near 1500+ customers in and around my district.Bought in my existing fleet of cabs and also started signing in taxi's from the union. Everything went well until theharvest festival. For the first time, I had a simple surge in traffic. Not much, like just 80+ people tried to use itsimultaneously and hell broke loose. The app simply failed to load! it just kept spinning. I would have easily used that festival to make my app aninstant hit. But everything fell apart. Even the drivers left....." Sad, but true. Not all Technologically ready products are business ready. Being Business ready means, your TaxiDispatch Software needs to be programmed in a manner to easily accommodate at least 1000+ parallel users atany given point of time. Most companies don't give this factor a thought. Or even worse, they don't have developers who know how tocode a product that will handle a lot of users.On the other hand, there are companies that just claim their software can handle traffic but in reality they mighthave not even tested it. If your Taxi dispatch Software is not business ready, it will fail when you try to run a realbusiness with it.

02 IS IT EASY TO HACKYOUR BUSINESS?

However good looking your Taxi Dispatch Software is. Or, how much ever business ready it is. If the system has not been build with strong securityfoundations, it can be a disaster. Read on... You need to understand, a Taxi Dispatch software involvesmobile apps on different platforms. Front end and admin panel. A backend server side coderunning. In such a scenario there are various communications happening just within your system in so many ways thatyou cant imagine. Such an environment is also the most favourite playground for hackers. The reason, I keep saying securityprotocols needs to be employed from the start of developing the system is: It CANNOT be added after thesystem is developed. Sadly most of the companies that develop the taxi dispatch software add security after its developed.And it doesn't work. There are a zillion ways even a novice hacker can hack your Taxi dispatch system effortlessly using a set ofelementary tools. In fact, there are automated bots that do the job. And these hackers are damn cunning. They never waste their time on newly setup systems. They only work onsystems that have been running for some time and is making some decent money. So, they can take it over anddemand ransom. So, please make it a point to ask your Taxi Dispatch Software developer if they have followed the DRACONIANSECURITY implementation process. Right from the start of the development cycle.

03DO YOU REALLYOWN IT?

This is the million dollar question. If you are a coder, you willalready know what Am going to reveal. Simple, you can program a product so other developers find it super difficult to understand or modify it. Many Taxi Dispatch software companies follow this strategy to retain the customer.

If you try to hire a freelancer or another company in future to customize or maintain your product, it will bea nightmare. Other developers wont understand why calls to functions and classes are made out of the blue.Or why the business logic layer in the code is in so many different layers. Or why the API channels passthrough a different framework. In the eyes of the new developer the entire coding will be chaos. This being an age old technique, now companies have become smart. They use existing frameworks likeLaravel, Node, Code igniter etc. and still make the functions inside complex. So, when asked about this pointthey just say its done on standard frameworks and escape. Make sure, the coding practice in your TaxiDispatch Software follows the 'waterfall' model. This model cannot be messed around with and is the most straightforward approach to coding. It'sconsidered the best methodology to program and also deliver any products. Also, it helps to easily transition the entire code base to next set of developers. Any new programmer caneasily hit the road running when this is followed.

Smart-Car.Tech

DEAR CUSTOMER,Welcome to the world of SMART-CAR.TECH. We're committed to making your business a success. Ourproduct incorporates some of the best features andmeasures to help you run the business as smooth aspossible. We're excited for you and we understand that you're hereto speed up your Go To Market Time by using our product.We are aggressively looking forward to meet yourexpectations. If you have any questions related to the product ormarketing your taxi business, do get in touch with us at

info@smart-car.tech | www.smart-car.tech

SMART-CAR.TECH

COMPANY BACKGROUND

Smart-Car’s Nikola is a growing web and mobileapplication Development Company that is locatedaround the world and has its development center atBangalore, India. The silicon valley of India. We are ateam of 50 people on web and mobile applicationdevelopment with average of 8 years of experience. Our main area of expertise is building mobileapplications on the iOS and Android platforms. We do application development for start ups,agencies and enterprises in various industries like E-commerce, Healthcare, Automobiles, Socialnetwork and Educational area.

Our experienced developers have worked on PHP,NodeJS, HTML5, AngularJS, CSS3 and other modernweb technologies. They've worked on projects thatinvolve building products for the CRM, ERP,Ecommerce, Mobility, and Automobile industries. As a team we also contribute to various communityprojects in our free time. This brings out the best inus.

SMART-CAR.TECH

ABOUTNIKOLA

Base Product can be setup in 24 HoursIndustry Leader in adding new features first.Considers Security an IMPORTANT productfeature.Unlimited users and DriversSuccessful Rational robot simulation test Real world Product testing. Deployed for Customers with thousands of usersInstallation Support for Ultimate Package. Complete Marketing Service for your TaxiBusiness (Optional)Complete White label solution.100 % Source Code and InstallationDocumentation

WHAT MAKES NIKOLA BUSINESS READY?

O N - D E M A N D T A X I A P P L I C A T I O N T H A T H E L P SY O U R U N Y O U R R I D E H A I L I N G B U S I N E S SS M O O T H L Y .

IS NIKOLA BUSINESS READY?

Nikola by SMART-CAR.TECH was created to caterto Taxi businesses that were finding it hard to gainstrong foothold in a market that they once ruledbefore app based aggregators like UBER, LYFT etccame about. NIKOLA was built tough to tackle the modern daychallenges that these offline taxi businesses faceand give them a new lease of life online.

Smart-Car.Tech

Accept / Reject Requests Trip History Toggle Availability StatusOn-board VehicleAccept Airport BookingReject Airport BookingCall Rider Track Trip StatusInvoice through emailChat with Rider

Normal BookingAirport RideRental Ride (Hourly Package)Ride Variants (Basic, Premium, Luxury)Unlimited CarsUnlimited DriversPre-ride Fare EstimatorRequestMatch Algorithm 2.0Proximity based requestsIn-App ChatDisplay Driver DetailsCall Feature Ride Tracking OTP while registrationApp side language changeApp side Currency changeMake Payment Confirmation ReceiptAbility to rate driverGeo Fencing

FEATURES OF ONDEMAND TAXIAPPLICATION

USER APP (iOS & Android)

Driver App (iOS & Android)

Includes: Corporate Dashboard | Call Center Dashboard | Admin Dashboard

Mobile Application will work in English and can be customized to any other language.

We follow what we call as the Pyramid TestingProcedure where as soon as the developer handsdown the code to First level testing engineer, it isreviewed for Basic Functionality Flaw Testing(BFFT).Where basic functions on the app are meticulouslytested every time an update is put out. Later the Secondary Test Engineer tests the codefor logical flaws and other complicated scenariosknown to us. Feedback is given to the developers who wouldrectify any mistakes and then move to optimize thecode for speed and security. At the final stages of the product development, thecode is well documented so any developer you hireto make changes would be able to do so with ease.

Our coding approach is modular and the meets theglobal standard to make the product easy to workon. Any developer can take it and add feature orcustomize existing features to create a truly uniqueproduct without our dependency. The code has gone through rigorous testing andmultiple iterations by different teams. Nikola hasevolved over time and every new feature added isregularly tested with multiple scenarios in mind. In an unfortunate event, that we do miss out aminor bug, we immediately get down to fixing it.The code life cycle is documented and updated asper recommendations by the Operating Systemsmanufacturers from time to time. When there is anew OS update by either Android or iOS there arevarious aspects to consider, we prioritize and workon releasing the updates to our customers.

CODE QUALITY AUDITING

SMART-CAR.TECH

SMART-CAR.TECH

We're leaving no stone unturned when it comes toDRACONIAN SECURITY. Making sure that the product not only stays up todate with the features for you to scale and growyour business but is also secure. A secureapplication can withstand the test of time andprotect your customer data from most of the basicsecurity breaches known to us. The code has also been audited by a third partysecurity firm for any potential breach possibilities.

SECURITY

01Basic security compliance andPenetration Testing procedures

02Code level security measures and bestpractices have been incorporated.

03Up to date third party Componentswith the latest security patches used.

Some of the security measures we've taken

DRACONIAN SECURITY is a 25 point security iteration that ensures your Web and Application securityfrom most of the attacks that are prevalent today.

Role based access: Access segregation and user Privileges were tested for data leakage and other knownissues. Input Controls: Thorough Input validation checks were done to ensure no out of range value, mismatchand Common controls related errors were occurring.Password Encryption: Password encryption was checked to see if the hash was getting generated andsaved securely in the database. Login Inactivity: Proper functioning of system wide session inactivity detection and termination weretested. Cross Site Request Forgery (CSRF): Measures to prevent CSRF and other common forms of sessionpoisoning attack methods were checked. Directory security: Directory write functionality is disabled by default. Suspicious URL String Filter: Longer characters are truncated while trying to pass on potential maliciousvalue through URL request.NON-English String value rejection: Requests loaded with Non-English characters are rejected. This isdone to prevent attacks that use certain non-Unicode/non-roman characters to crash the application.

Please note: Some security measures require you to implement third party components like SSL etc., Please talk to our installation experts to know more.

SMART-CAR.TECH

SECURITYAutocomplete is disabled on sensitive section of the system and the app.Systematic Error logs maintained to trace any unintended events that the app may endure. It is not possible to use sensitive information revealed by error messages to launch further attacks.SQL injection preventive measures MIME Type upload restrictionsBrute force attack restrictions (Custom)Cache Poisoning prevention (Applicable for Admin Panel)CloudFlare compatibility (Setup not part of the application)SSL Compatibility and 100% encrypted app communication testing.

Ram – 2 gb min, HDD - 15GB min, Ubuntu - 14.04 LTS, Lamp - Mysql 5.4 and above, PHP

We highly recommend DigitalOcean or AWS(Amazon Web Server) server for hosting.

Server - Digital Ocean Sign up here > Choose $20 droplet > OS -16*64 and once you have purchased,share us the server credentials that you receive in your email.

Twilio - Go to: https://www.twilio.com/ -> Sign up -> Fill in the details -> You

Mandrill - Click on this link -> http://mandrill.com/ -> Sign up -> Fill in the details -> After

Play store account - Click on this link here to create Playstore account-> Create an account - you willhave to pay $25 to enroll on developer console ->Share us the account credentials.

Facebook login -> Please create new one or giving us the existing credentials for social registration.

Logo , Splash screen , Brand name should be provided. Resolution will be shared once the project issigned off by the support head.

ProposalAPI DocumentationSource Code of iPhone, Android and Backend Application

Web frontend landing page, admin portal, API and CorporateDashboard. iPhone ApplicationAndroid application

Below mentioned are the Basic server requirements for hosting:

5.4 and above, Apache - 2.4.

- And please find the third parties steps for each signup you will have to provide us below list details:

will have to register and upgrade your account by recharging your wallet for $20 > Shareus the account credentials.

logging go to account - Choose transnational -> and then mandrill -> you will have to addyour payment method by selecting monthly.

DOCUMENTS AND DELIVERABLES 1. DOCUMENTATION DELIVERABLES: The following documentation and deliverables will be provided,

2. APPLICATION DELIVERABLES:

UBUNTU -> Firefox– 45.0, Chrome – 49.0.2623.87WINDOWS => Chrome - 49.0.2623.87, Firefox- 45.0, IE - 11.0MAC => Safari Latest version

iPad - 768 x 1024iPhone - 320x480Samsung Note - 480 x 800Moto G - 720 x 1280

Application will support in iOS 7 to latestApplication will work in iPhone 5 to abovedevices. Application will work in portrait mode

We can provide free support on the requirements that we delivered. Any defects

Any new additional requirements should be consider as Change of Request (which we will

Any high level defects occurs will be handled within 12-24 hours of turnaround time and

Lower level issues/changes will be responded within 48 hours of time period

The Customer will be required to undertake acceptance of the Deliverables within six [06] days ofthe completion of the Deliverables.

The Customer must advise to Smartcar’s team of any defects that are identified for correction. Ifno acceptance is undertaken within six [06] days of completion of the Deliverables, theDeliverables will be deemed to have been accepted by the Customer and the Customer will beinvoiced for any charges due.

Source code will be delivered upon clearance of full payment

SUPPORTED VERSIONS AND DEVICES:Web application: Web browser compatibles are below,

Responsive design integration compatible resolution of devices are below:

iPhone Application:

only. Android Application: - Application will support in Android OS 4.4.4 to Android 9.0- Application will work in android phones only which is OS of 4.4.4 to 9.0- Application will work in portrait mode only. Conditions: After the scope document is signed, the scope of the project is fixed. New requirements have to besubmitted as change request and are chargeable.

in the system will be fixed.

handle it as new project enhancement).

revert back the status to team. Based on the issue, we will be flexible.

Once again, Thank you for your Interest in NIKOLA, Do write to us if you have any questionhere: info@smart-car.tech