# Business rules — public-quantivia.com

Evidence date: 2026-10-06. Source: `git@bitbucket.org:overdrive/public-quantivia.com.git`, `master` at `9e3c6f2` (2020-08-27).

Rules below are copied from pages or from the mail and form scripts. This website does not enforce product licensing. Where a rule is only an FAQ sentence, it is **Documented** and marked **not enforced here**.

The Quantivia application repositories are a separate rule set. Do not read those rules back into this site unless a public page states them.

## Identity and contact

**BR-001 — Published company contact.** **Documented** (`header.php`, `form.php`, `contact.php`).

- Office: 18 – 20 Le Pollet, St Peter Port, Guernsey, GY1 1WH.
- Email: info@quantivia.com.
- Phones: Europe +44 (0)745 203 4633, USA +1 (0) 915 229 3160, Africa +27 (0)79 498 9114.

**BR-002 — Copyright holder on the site is Procon8, 2016.** **Documented** (`footer.php`). The home contact block also says questions may be about Procon8 (`form.php`). How Procon8 relates to the repository owner is **Unknown / Requires Confirmation**.

**BR-003 — Sales mail goes to two people.** **Implemented** (`mail/lib/mail_sender.php`).

Every form that posts to `mail/mail.php` is addressed to info@quantivia.com and alastair.davidson@procon8.com. Commented addresses in the same file are not used.

## Who the product is for

**BR-004 — Stated audience.** **Documented** (`explanation.php`, `index.php`).

- Companies: medium to large (`explanation.php`).
- Industries named: engineering, construction, manufacturing, rail, aviation, infrastructure. The home page also says oil and gas through "the world's leading manufactures".
- Roles named: project directors, project managers, project management, project controls, planning, scheduling, cost controls, performance management, and six sigma.

These are marketing statements. The site does not check company size or industry.

## Licensing and commercial rules (page copy)

**BR-005 — Three license bands.** **Documented** (`prices.php`). **Not enforced** in this repository.

- Desktop.
- Project: up to ten users. The sentence on the page reads "up to ten 10 users".
- Corporate: more than ten users. The page spells this "more that 10 users".

**BR-006 — Desktop limits.** **Documented** (`prices.php`).

Desktop installs on a local computer for local use. It does not include enterprise tools. The introduction names Risk and task tracking as examples. It is not recommended for large projects. Price is on request, per user. The next step is the contact form.

**BR-007 — Project and Corporate can be bought or leased.** **Documented** (`prices.php`).

The introduction says Project and Corporate may be purchased outright or leased as SaaS. Desktop is excluded from that sentence ("Please note our Desktop option does not include enterprise tools").

**BR-008 — SaaS does not transfer a license.** **Documented** (`prices.php`).

The SaaS card says the supplier hosts Quantivia, the customer does not own a license, and therefore no SLA is required. Price is on request, per user.

**BR-009 — Outright purchase keeps use rights.** **Documented** (`prices.php`).

The customer "retain[s] full rights to use the software" and may customise and develop certain aspects with the team. An SLA for updates is optional and is not included. Price is on request, per license.

**BR-010 — No public price.** **Implemented** as content. Every card shows "On Request". No currency, tax, or term length is stated.

**BR-011 — Older Corporate API rule.** **Documented** only in `website_new/prices.php`.

That copy says a Corporate outright license includes customisation with PROCON8 and access to the API. The root `prices.php` does not say this. **Requires Confirmation** which sentence is the commercial rule.

## FAQ rules (support.php)

These answers are **Documented**. None of them is implemented as code in this repository, except where noted.

**BR-012 — Sold as a download from www.quantivia.com.** Boxed media is not offered. The FAQ says both "where and how can I buy" and "can I buy a boxed product".

**BR-013 — One computer.** "According to the license agreement you are allowed to install the software on only one dedicated computer." The license agreement file is not in this repository (`license.lic` is a binary and was not interpreted). Downloading from a different machine is allowed, but "the software would only work on the computer with the correct license file."

This one-computer rule conflicts with BR-005 (ten users, more than ten users) and with BR-008 (SaaS, no customer license). **Requires Confirmation.**

**BR-014 — Operating systems.** "Quantivia runs on Windows XP, Vista, Win7 and Win8 and Win 10 64 bit. Alternatively, it could be installed on a PHP webserver."

**BR-015 — Demo project versus trial.** "There is demo project loaded in the download, but not a trial version." The live-demo page (`viewdemo.php`) is a separate hosted demo, not this downloadable demo project.

**BR-016 — Payment and license timing.** **Documented. Not implemented here.**

- Payment includes credit-card details on an online transaction.
- After payment is verified, the visitor reaches download links.
- A license number is emailed to the address entered in the transaction and is the key for activation.
- Clicking a Quantivia link opens a transaction page. Purchase finishes only after the required data and the terms are accepted.
- After the transaction, a mail asks for details needed to issue a license file. "License files are issued within 12 hours."

`prices.php` sends buyers to `contact.php` instead. No card form exists. **Requires Confirmation** which purchase path is real.

**BR-017 — Re-download.** "There is no limit on how many times the install files may be downloaded."

**BR-018 — Install size.** The install file is about 200 MB (`support.php`). `download_thanks.php` says just under 200 MB. Disk space to run the software is approximately 2 to 3 GB.

**BR-019 — Backups.** The FAQ says there are regular backup options, and that a standard Microsoft Windows backup of the Quantivia data folder is enough if the files are lost. No backup job is in this repository.

**BR-020 — Getting started.** "The extensive help menu has a section on Getting Started." That help menu is inside the product, not this site.

## Lead-capture rules

**BR-021 — Contact form required fields.** **Implemented** in `js/scripts.js` against classes on the form.

- `form.php`: name, email, message required. Email must match `/(.+)@(.+){2,}\.(.+){2,}/`.
- `contact.php`: name and email required with the same email test. Company, comments, and referrer are optional. The referrer control defaults to the value `Default`.

There is no server-side equivalent. **Inferred:** a client that skips JavaScript can POST an empty body to `mail/mail.php`.

**BR-022 — Demo request is not validated in the browser.** **Implemented.** `viewdemo.php` fields have no `validate-required` class. The hidden field `list` is the visitor's IP address.

**BR-023 — A numeric mail response opens the demo.** **Implemented** (`js/scripts.js`).

If `mail/mail.php` returns a number, the demo form navigates to `https://demo.quantivia.com/auto_login.php?demo=true` even when the number is 0. The success message block runs only when the number is greater than 0. Contact forms do not redirect.

**BR-024 — Download signup is a Cotomo list, not a purchase.** **Implemented** (`download.php`).

Fields are first name, last name, and email. No required-attribute check is in the HTML. List id `DwvWej120xMqsls0AYn6Xw`. The page promises a follow-up email to a download page. That promise is **Documented**. Fulfilment is outside this repo.

**BR-025 — Mail body is the raw POST.** **Implemented** (`mail/lib/mail_sender.php`).

Each posted key is capitalised and written into the message, including `url` (added by `scripts.js`) and, on the demo form, the IP. The message is sent as HTML without escaping. **Inferred risk:** posted values are not encoded, so the email body can contain HTML from the visitor.

**BR-026 — From address is the company inbox, not the visitor.** **Implemented.** When name and email are posted, `setFrom` uses `info@quantivia.com` and the visitor's name. Reply-To is `Name<email>`.

**BR-027 — Subject line.** **Implemented** (`mail/mail.php`). Subject is "Quantivia Project Management Website Request" for every form that uses this script. The contact page's success text says "complete the planner", which does not match the fields on the form. Provenance of that sentence: **Documented** on the `data-success` attribute. Likely leftover template copy. **Inferred.**

## Access rules

**BR-028 — No login on this site.** **Implemented.** No session, password, or role check exists on the public pages.

**BR-029 — Live status is hidden, not deleted.** **Implemented.** The menu item uses `display:none`. The URL `status.php` still renders the iframes.

**BR-030 — Crawlers are allowed.** **Implemented** (`robots.txt` has an empty `Disallow`).

## Conflicts that need a human decision

| Topic | Statement A | Statement B |
|---|---|---|
| How to buy | FAQ: card checkout on the website, then download | Pricing: "On Request", then `contact.php`. No checkout code |
| How many users | FAQ: one dedicated computer | Pricing: Project up to 10, Corporate above 10, or SaaS with no customer license |
| Where it runs | FAQ: Windows XP–10 or a PHP web server | Application docs in `silicon_ark/quantivia*` describe an eGroupWare PHP app. This repo contains neither installer nor that app |
| What "demo" means | FAQ: a demo project inside the download, not a trial | `viewdemo.php`: a hosted login at demo.quantivia.com |
| Deliverable counts | `why_quantivia.php`: 13k+ | `casestudy.php`: 10,000+ |
| API for Corporate | `website_new/prices.php` says yes | Root `prices.php` does not say this |