ePocket – iOS and Android Mobile Apps
Client Background
Strategic Crisis Advisors (SCA), helps many of the World’s largest organizations prepare for the worst. With their knowledge and expertise earned through realworld experiences in responding to incidents including Hurricanes Sandy and Katrina, 9/11, plant explosions, and challenges to corporate reputation, they bring valuable scar tissue to each client project and use it to help develop plans, train teams, and conduct exercises that reflect reality. SCA has worked with companies in various industries including: financial, retail, oil & gas, manufacturing, energy, food service, consumer goods and national defense.
Project Overview
Strategic Crisis Advisors (SCA) initiated to automate it’s e-Pocket guide PDF document more robust and accessible anywhere and anytime. Hence building a Mobile Application that simplifies that is available for Android and iOS Platforms. Strategic Crisis Advisors reached approached Softcrylic for building a selfmanageable, scalable native mobile application, so that they will be able to distribute their solutions better and in a modern way.
Project Approach
Softcrylic’s project team comprised of UI, UX, and Native App development experts engaged with Strategic Crisis Advisors (SCA) in-house technology team in understanding the requirements. By working in a consultative mode, a roadmap was put together for designing and delivering this Mobile application that will be used by SCA’s clients.
Project Goals
- A World class mobile application that International Clients use during Crisis situation
- Simplified Content Management System to update latest content that gets distributed in real-time
- A robust user management system so that multiple stakeholders can access, handle role-specific aspects of the app anywhere and anytime
- A secure app that meets modern app standards and flawlessly perform under peak load conditions
Solution
Softcrylic delivered a cloud-native mobile application named as “e-Pocket” that synchronizes and distributes emergency and crisis management content in real-time. The solution was tested thoroughly across all mobile devices for its functionality, visual appeal, security and performance.
Key Features of the Mobile App
![]()
Softcrylic delivered a cloud-native mobile application named as “e-Pocket” that synchronizes and distributes emergency and crisis management content in real-time. The solution was tested thoroughly across all mobile devices for its functionality, visual appeal, security and performance
Security Audit
For meeting application development standards to deploy it to clients like Facebook and other International brands, a security audit was done by NCC group. A comprehensive security assessment of the e-Pocket Guide mobile apps and backend were conducted in an open-ended and time-boxed manner.
Key aspects that were audited:
- Authentication & Access controls, use of Cryptographic Session Tokens to identify users.
- Communication of Sensitive information securely such as Passwords etc.
- Vulnerability of code while executing it remotely.
- SQL Injection vulnerabilities.
- Saving Private keys, certificates, Data in a secured way within App or backend.




Outcomes
Softcrylic delivered Android and iOS Mobile Apps successfully within stipulated time and on-budget. The application is now being actively used by 1000s of users from major international brands.
Tools & Technologies
IOS
- Xcode7+,Objective C, iOS 7+, OS X Yosemite
- Third party tools: Facebook SDK, Google Analytics, AFNetworking 2.0, SDWebImage, SQMessagesViewController
- Database: SQLlite
- Beta-Testing: TestFlight
- Security: Keychain, SHA/AES Encryption
ANDROID
- Android Studio 1.5+, Android SDK
- Supported Android OS: Android 3.0 and onwards.
- Database: SQLlite
- Third party tools: Facebook SDK, Google Analytics, Android-Universal-Image-Loader
- Security: SHA/AES Encryption
WEB
- WebStorm IDE, PHP 7, HTML, JQuery, Ajax, Slim Framework
- Database: MySQL 5.7
- Web server: Apache/2.4.18
- Operating System: Ubuntu 14.04
- Authentication: HTTP Basic Authentication is used for client server authentication
- Authorization: Via Auth token. Random cryptographic string is generated to check the request is from the authorized source.
- SSL: OpenSSL 1.0.2g